warnWebSocketOrigin method

void warnWebSocketOrigin()

print one warning to stderr when a Route.websocket route checks no Origin. Any site can then open a socket with the cookies of the user.

Implementation

void warnWebSocketOrigin() {
  if (_warnedWebSocketOrigin ||
      config.webSocketAllowedOrigins != null ||
      !Route().hasWebSocketWithoutOriginCheck) {
    return;
  }
  _warnedWebSocketOrigin = true;
  // stderr, not Logger: the logger is off by default
  stderr.writeln(webSocketOriginWarning);
}