mirror of
https://github.com/transloadit/uppy.git
synced 2026-07-27 04:05:10 +00:00
7e5acf105f
You can verify it using:
```
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Media API PoC</title>
</head>
<body>
<h1>Media API Cross-Site WebSocket Hijacking PoC</h1>
<script>
let ws = new WebSocket("wss://<url + base path>/api/poc");
ws.onopen = function () {
console.log("WebSocket connection established.");
ws.send("Malformed JSON");
};
</script>
</body>
</html>
```
|
||
|---|---|---|
| .. | ||
| @uppy | ||
| uppy | ||