Sönke,
I would like to request that sessions support a route mode. E.g.
http://vibed.org/ss8IUb5v5RE3FqaGWY1lYQ/Path/to/template
The reason for this, is because WebSockets do not follow the "same
origin" requirement that other connections do. If you have an open
session to a vibe-d server. It's possible to have another website open
a websocket connection to your host, and the browser will happily send
the appropriate cookies to authenticate. This is a potential
security problem for people using websockets. They need to use a route
mode instead.
See here for more info:
http://www.christian-schneider.net/CrossSiteWebSocketHijacking.html
Thanks!
-Shammah