Is your proposal related to a problem?
By default, the hot reloading functionality enabled in create-react-app, allows random websites to access the local development server error logs via websockets. These error logs can contain code and sensitive data, which can then be leaked out to external websites.
The problem is described here: https://medium.com/@stestagg/stealing-secrets-from-developers-using-websockets-254f98d577a0
Describe the solution you'd like
Access to the local websocket server should be restricted. For example with a random secret.
Is your proposal related to a problem?
By default, the hot reloading functionality enabled in create-react-app, allows random websites to access the local development server error logs via websockets. These error logs can contain code and sensitive data, which can then be leaked out to external websites.
The problem is described here: https://medium.com/@stestagg/stealing-secrets-from-developers-using-websockets-254f98d577a0
Describe the solution you'd like
Access to the local websocket server should be restricted. For example with a random secret.