diff options
| author | Kai Koehne <kai.koehne@theqtcompany.com> | 2016-04-07 09:52:29 +0200 |
|---|---|---|
| committer | Kai Koehne <kai.koehne@theqtcompany.com> | 2016-04-07 12:46:21 +0000 |
| commit | be4bfc5feeb61e97378bee325d36bb74f007fe04 (patch) | |
| tree | 8b7fa16f684a7df6e8f5b927d32e4b4dea94e91a /src/websockets/qmaskgenerator.cpp | |
| parent | 3b128f9b45f4fafc305ff0c89cfc2cb665c856d5 (diff) | |
| download | qtwebsockets-be4bfc5feeb61e97378bee325d36bb74f007fe04.tar.gz | |
Doc: Add external-resources.qdoc
Also sanitize some linking, e.g. by referencing to
the paper by title, not by link.
Change-Id: I95482994ca569001a23a3beb0e3cbe6739f4ed77
Reviewed-by: Leena Miettinen <riitta-leena.miettinen@theqtcompany.com>
Reviewed-by: Topi Reiniö <topi.reinio@theqtcompany.com>
Diffstat (limited to 'src/websockets/qmaskgenerator.cpp')
| -rw-r--r-- | src/websockets/qmaskgenerator.cpp | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/websockets/qmaskgenerator.cpp b/src/websockets/qmaskgenerator.cpp index cc53156..88baab6 100644 --- a/src/websockets/qmaskgenerator.cpp +++ b/src/websockets/qmaskgenerator.cpp @@ -39,11 +39,11 @@ \brief The QMaskGenerator class provides an abstract base for custom 32-bit mask generators. - The WebSockets specification as outlined in \l {http://tools.ietf.org/html/rfc6455}{RFC 6455} + The WebSockets specification as outlined in \l {RFC 6455} requires that all communication from client to server be masked. This is to prevent malicious scripts from attacking badly behaving proxies. For more information about the importance of good masking, - see \l {http://w2spconf.com/2011/papers/websocket.pdf}. + see \l {"Talking to Yourself for Fun and Profit" by Lin-Shung Huang et al}. By default QWebSocket uses the cryptographically insecure qrand() function. The best measure against attacks mentioned in the document above, is to use QWebSocket over a secure connection (\e wss://). |