diff options
| author | Liang Qi <liang.qi@theqtcompany.com> | 2016-04-08 10:24:21 +0200 |
|---|---|---|
| committer | Liang Qi <liang.qi@theqtcompany.com> | 2016-04-08 10:24:21 +0200 |
| commit | 00156d63eea2fb7681a8a00a3144392d6325e5cb (patch) | |
| tree | 40f5159d523966cac856138a32d6d369c20b536b /src/websockets/qmaskgenerator.cpp | |
| parent | c6d19a89046763f680d7f67c6f9989b4f51fc71e (diff) | |
| parent | ba9306ec5a1271275d79b2f48ceb227f79352f33 (diff) | |
| download | qtwebsockets-00156d63eea2fb7681a8a00a3144392d6325e5cb.tar.gz | |
Merge remote-tracking branch 'origin/5.6' into 5.7v5.7.0-beta1
Change-Id: I7ebcdc16a8b65103abfb9640c990eddbeccdef05
Diffstat (limited to 'src/websockets/qmaskgenerator.cpp')
| -rw-r--r-- | src/websockets/qmaskgenerator.cpp | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/websockets/qmaskgenerator.cpp b/src/websockets/qmaskgenerator.cpp index 2c90c1e..064ada2 100644 --- a/src/websockets/qmaskgenerator.cpp +++ b/src/websockets/qmaskgenerator.cpp @@ -45,11 +45,11 @@ \brief The QMaskGenerator class provides an abstract base for custom 32-bit mask generators. - The WebSockets specification as outlined in \l {http://tools.ietf.org/html/rfc6455}{RFC 6455} + The WebSockets specification as outlined in \l {RFC 6455} requires that all communication from client to server be masked. This is to prevent malicious scripts from attacking badly behaving proxies. For more information about the importance of good masking, - see \l {http://w2spconf.com/2011/papers/websocket.pdf}. + see \l {"Talking to Yourself for Fun and Profit" by Lin-Shung Huang et al}. By default QWebSocket uses the cryptographically insecure qrand() function. The best measure against attacks mentioned in the document above, is to use QWebSocket over a secure connection (\e wss://). |