@halcy@Gargron because reasons?
I remember that js is given no info whatsoever (and especially no status codes) with exact reasoning to disallow port scanning but as article says they still use timing
@charlag@halcy Well, unless you're a developer, and most likely unless you're also on a localhost page in the browser, I don't think you would ever legitimately want to connect to a localhost websocket. It's strange that it's allowed.
Gregory's Server
@charlag @halcy Well, unless you're a developer, and most likely unless you're also on a localhost page in the browser, I don't think you would ever legitimately want to connect to a localhost websocket. It's strange that it's allowed.