Websockets must use SSL connections

This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Metadata

ID: javascript-browser-security/insecure-websocket

Language: JavaScript

Severity: Warning

Category: Security

CWE: 319

Description

Always use secure websocket communication. When using websocket, use addresses that are SSL-enabled.

Non-Compliant Code Examples

const client = new WebSocket('ws://app.domain.tld')

Compliant Code Examples

const client = new WebSocket('wss://app.domain.tld')
https://static.datadoghq.com/static/images/logos/github_avatar.svg https://static.datadoghq.com/static/images/logos/vscode_avatar.svg jetbrains

Seamless integrations. Try Datadog Code Analysis