fix: add Connection header validation to IsWebSocket() (RFC 6455)

raju-mechatronics · raju-mechatronics · commit 6a1dc4ea7e11 · 2026-01-23T20:04:48.000+06:00
diff --git a/context.go b/context.go
@@ -269,7 +269,8 @@ func (c *context) IsTLS() bool {
 
 func (c *context) IsWebSocket() bool {
 	upgrade := c.request.Header.Get(HeaderUpgrade)
-	return strings.EqualFold(upgrade, "websocket")
+	connection := c.request.Header.Get(HeaderConnection)
+	return strings.EqualFold(upgrade, "websocket") && strings.Contains(strings.ToLower(connection), "upgrade")
 }
 
 func (c *context) Scheme() string {

Original file line number	Diff line number	Diff line change
`@@ -269,7 +269,8 @@ func (c *context) IsTLS() bool {`
`269`	`269`
`270`	`270`	`func (c *context) IsWebSocket() bool {`
`271`	`271`	`upgrade := c.request.Header.Get(HeaderUpgrade)`
`272`		`- return strings.EqualFold(upgrade, "websocket")`
	`272`	`+ connection := c.request.Header.Get(HeaderConnection)`
	`273`	`+ return strings.EqualFold(upgrade, "websocket") && strings.Contains(strings.ToLower(connection), "upgrade")`
`273`	`274`	`}`
`274`	`275`
`275`	`276`	`func (c *context) Scheme() string {`