added socketio authorization (untested)

lib/Webserver/Webserver.js

@@ -17,8 +17,8 @@ var Collector = require('../Collector');
 
 
 function WebServer(webPort) {
- 	if (!(this instanceof WebServer)) 
- 		return new WebServer(webPort);
+	if (!(this instanceof WebServer)) 
+		return new WebServer(webPort);
 
 	var app = express();
 	var server = http.createServer(app);
@@ -27,6 +27,16 @@ function WebServer(webPort) {
 	// Socket.io (Express 3 method of integration)
 	var io = sio.listen(server);
 	io.set('log level', 1); 	
+	io.configure(function () {
+		// use global authorization and reject all cross-domain connection attempts
+		io.set('authorization', function (handshakeData, callback) {
+			if (handshakeData.xdomain) {
+				callback('Cross-domain connections are not allowed');
+			} else {
+				callback(null, true);
+			}
+		});
+	});
 
 	// io.sockets.on('connection', function(socket) {
 	// 	// console.log('GOT SOCKET IO CONNECTION');