[tinfoilhat]

xss + tcp and now udp websockets. match made in heaven.

[dasmoth]

This isn't anything to do with websockets.

These are raw, unadulterated sockets -- but only available to Chrome extensions, not normal web pages. I'm pretty certain Mozilla extensions have been able to create sockets for a while, and the sky hasn't fallen yet.

Edit: https://developer.mozilla.org/en/XPCOM_Interface_Reference/n...