If used incorrectly your WebSocket server will be open to CSRF attacks. InsecureSkipVerify bool @nhooyr How to set origin like gorilla's CheckOrigin? Looking forward to your reply, appreciate it.