# ws_prescan report

files scanned: 4 — findings: 12

## HIGH
- `WS-MSG-EXEC` channel-exec.py:6 — socket message (message) reaches an exec/eval sink — frame bytes become executable code
- `WS-ORIGIN-BYPASS` gorilla-bypass.go:9 — explicit always-true / wildcard origin acceptance — any web page can open a socket riding the victim's cookies (CSWSH)
## MEDIUM
- `WS-NO-ORIGIN-CHECK` channel-exec.py:8 — socket acceptor with zero origin vocabulary — this library's default accepts any Origin, so any site the victim visits can drive their socket (CSWSH surface; verify upstream proxy/gateway rules)
- `WS-NO-ORIGIN-CHECK` chat-server.js:6 — socket acceptor with zero origin vocabulary — this library's default accepts any Origin, so any site the victim visits can drive their socket (CSWSH surface; verify upstream proxy/gateway rules)
## LOW
- `WS-NO-AUTH` channel-exec.py:8 — socket acceptor with zero auth-handshake vocabulary — every connection is anonymous (fine for public feeds, worth one line of review)
- `WS-NO-MSGLIMIT` channel-exec.py:8 — socket acceptor with zero frame/message-size vocabulary — oversized-frame memory pressure surface
- `WS-NO-AUTH` chat-server.js:6 — socket acceptor with zero auth-handshake vocabulary — every connection is anonymous (fine for public feeds, worth one line of review)
- `WS-NO-MSGLIMIT` chat-server.js:6 — socket acceptor with zero frame/message-size vocabulary — oversized-frame memory pressure surface
- `WS-MSG-REFLECT` chat-server.js:12 — socket message (text) re-sent to other clients unfiltered — one client's bytes reach every connected DOM
- `WS-NO-AUTH` gorilla-bypass.go:8 — socket acceptor with zero auth-handshake vocabulary — every connection is anonymous (fine for public feeds, worth one line of review)
- `WS-NO-MSGLIMIT` gorilla-bypass.go:8 — socket acceptor with zero frame/message-size vocabulary — oversized-frame memory pressure surface
- `WS-MSG-REFLECT` gorilla-bypass.go:19 — socket message (msg) re-sent to other clients unfiltered — one client's bytes reach every connected DOM