Merge pull request #2314 from GValeriy/master

fix: Restrict subscriptions WS server to add listeners only to its own path
nestjs · Sep 1, 2022 · 593a0d1 · 593a0d1
2 parents ca8cabb + 64c59fa
commit 593a0d1
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/packages/graphql/lib/services/gql-subscription.service.ts b/packages/graphql/lib/services/gql-subscription.service.ts
@@ -138,9 +138,11 @@ export class GqlSubscriptionService {
           ? this.subTransWs
           : this.wss;
 
-      wss.handleUpgrade(req, socket, head, (ws) => {
-        wss.emit('connection', ws, req);
-      });
+      if (req.url?.startsWith(wss.options.path)) {
+        wss.handleUpgrade(req, socket, head, (ws) => {
+          wss.emit('connection', ws, req);
+        });
+      }
     });
   }