Use secure WebSocket transport

#Metadata

Rule ID

ts.security.insecure-websocket-transport

Severity

high

Confidence

0.95

Languages

javascript, typescript

Presets

recommended, security, strict

Stability

stable

Applies to

block

Tags

rules-catalog, security, transport, websocket

#Why it matters

Cleartext WebSocket transport exposes application traffic to interception and manipulation.

#Remediation

Switch the endpoint to `wss://` and keep certificate validation enabled.

#Repository path

The generated metadata points to critiq-rules/libs/rules/catalog/rules/typescript/ts.security.insecure-websocket-transport.rule.yaml.