Insecure Cross-Origin Resource Sharing Configuration

socket.io uses an insecure cross-origin resource sharing configuration. All domains are whitelisted by default and allows cross-origin resource sharing, leading to information disclosure.