We’ve recently gone through a round of pen testing and had to deal with feedback on our use of WebSockets. Here is what we’ve done to get the WebSocket code to pass those pen tests