Ayham970andClaude Opus 4.8 6903f2d559 websocket: reject CR/LF in subprotocols; require negotiation in test ...

Address review feedback:
- Skip Sec-WebSocket-Protocol values containing CR or LF before negotiating
  them, since gobwas/ws writes subprotocols into the handshake request line and
  a line break could smuggle extra handshake headers.
- Tighten the test server to reject the upgrade unless the client offers the
  vite-hmr subprotocol, so the test fails if negotiation does not happen.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

2026-11-02 17:22:43 +04:00

..

websocket_backoff_test.go

fix dials

2026-10-19 13:21:59 +02:00

websocket_ratelimit_test.go

add tests

2026-10-09 20:20:02 +02:00

websocket_test.go

websocket: reject CR/LF in subprotocols; require negotiation in test

2026-11-02 17:22:43 +04:00

websocket.go

websocket: reject CR/LF in subprotocols; require negotiation in test

2026-11-02 17:22:43 +04:00