[html5] r4837 - [e] (0) Clarify how one of the WebSocket anti-DOS mechanisms works.

whatwg at whatwg.org whatwg at whatwg.org
Wed Mar 10 01:30:54 PST 2010


Author: ianh
Date: 2010-03-10 01:30:53 -0800 (Wed, 10 Mar 2010)
New Revision: 4837

Modified:
   complete.html
   source
Log:
[e] (0) Clarify how one of the WebSocket anti-DOS mechanisms works.

Modified: complete.html
===================================================================
--- complete.html	2010-03-10 02:45:54 UTC (rev 4836)
+++ complete.html	2010-03-10 09:30:53 UTC (rev 4837)
@@ -68011,10 +68011,15 @@
     even if known by another name, wait until that connection has been
     <a href=#websocket-connection-is-established title="WebSocket connection is
     established">established</a> or for that connection to have
-    <a href=#fail-the-websocket-connection title="fail the WebSocket connection">failed</a>.</p>
+    <a href=#fail-the-websocket-connection title="fail the WebSocket connection">failed</a>. If
+    multiple connections to the same IP address are attempted
+    simultaneously, the user agent must serialise them so that there
+    is no more than one connection at a time running through the
+    following steps.</p>
 
     <p class=note>This makes it harder for a script to perform a
-    denial of service attack by just opening a large number of WebSocket connections to a remote host.</p>
+    denial of service attack by just opening a large number of
+    WebSocket connections to a remote host.</p>
 
     <p class=note>There is no limit to the number of <a href=#websocket-connection-is-established title="WebSocket connection is established">established</a>
     WebSocket connections a user agent can have with a single remote

Modified: source
===================================================================
--- source	2010-03-10 02:45:54 UTC (rev 4836)
+++ source	2010-03-10 09:30:53 UTC (rev 4837)
@@ -76462,10 +76462,15 @@
     even if known by another name, wait until that connection has been
     <span title="WebSocket connection is
     established">established</span> or for that connection to have
-    <span title="fail the WebSocket connection">failed</span>.</p>
+    <span title="fail the WebSocket connection">failed</span>. If
+    multiple connections to the same IP address are attempted
+    simultaneously, the user agent must serialise them so that there
+    is no more than one connection at a time running through the
+    following steps.</p>
 
     <p class="note">This makes it harder for a script to perform a
-    denial of service attack by just opening a large number of WebSocket connections to a remote host.</p>
+    denial of service attack by just opening a large number of
+    WebSocket connections to a remote host.</p>
 
     <p class="note">There is no limit to the number of <span
     title="WebSocket connection is established">established</span>




More information about the Commit-Watchers mailing list