title: Websockets, socket.io, nodejs, and security
body: <p>I am working on a real-time analytics application and am using websockets (through the socket.io library) along with nodejs. There will be no "sensitive" data being sent through the websockets (like names, addresses, etc). It will be only used to track visits and to track the total visitors (along with the number of visitors on the top 10 most visited URLs).</p>
  
  <p>Are there any security issues that I should be aware of? Am I opening myself up to:</p>
  
  <ol>
  <li>DoS attacks?</li>
  <li>XSS attacks?</li>
  <li>Additional security holes that could be used to gain access to the webserver/webserver's LAN?</li>
  <li>Anything else I didn't mention here?</li>
  </ol>
  
  <p>Thanks!</p>