added socket.destroy after rejecting protocol upgrade (for security

reasons)
fragaria · May 21, 2020 · ff1efe7 · ff1efe7
1 parent 95b2fc4
commit ff1efe7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/server/server.js b/server/server.js
@@ -26,8 +26,8 @@ function setupWebsocketServer(httpServer, clientsManager) {
     clientsManager.authenticate(request, socket, (err, client) => {
       if (err || !client) {
         debug("Destroying connection");
-        // socket.destroy();
         socket.end('HTTP/1.1 401 Unauthorized\r\n\r\n','ascii');
+        socket.destroy();
         return;
       }