Re: Websocket security

2017-04-06 Thread mex
Hello christian, naxsi-contributor first bad news first: naxsi wouldnt work on websockets. Any other security for websockets you have to implement yourself. list of usefull reads: - https://devcenter.heroku.com/articles/websocket-security - https://security.stackexchange.com/questions/48378

Websocket security

2017-04-05 Thread Christian Schwaderer
Dear all, I ran NodeJS as a kind of Webapplication Server serving an AngularJS frontend. They communicate solely over WebSockets, using the SailsJS implementation of Socket.IO. Between frontend (client) and the NodeJS backend, sits nginx as a proxy, configured like so: |server { listen 1337