Pass referrer between clients of the internal discovery method #811
Labels
effort: Moderate
Will take a good amount of time and experience with the codebase, but feasible.
topic: Studio Connections
Related to messaging connection discovery between studio instances or inspectors.
Milestone
To determine whether a connection should be automatically accepted, it would be useful to know the origin of the connection.
In case of the internal discovery method, we can make sure the created iframe has
referrerpolicy
set to something permissive.The iframe can then pass on the referrer to the shared worker.
This allows other clients to determine whether they want to automatically accept connections or not.
The WebRtcDiscoveryMethod won't really be able to make use of this unfortunately.
Since anyone can open a connection to the WebSocket, they could easily spoof the origin header.
The text was updated successfully, but these errors were encountered: