fix: the socket in socket.ts

[orbisai0security]

Summary

Fix high severity security issue in packages/engine.io/lib/socket.ts.

Vulnerability

Field	Value
ID	V-007
Severity	HIGH
Scanner	multi_agent_ai
Rule	V-007
File	packages/engine.io/lib/socket.ts:1

Description: The Socket.IO server accepts incoming connections without any rate limiting or connection throttling. There is no IP-based connection limit, no per-second connection rate cap, and no maximum concurrent connection enforcement. An attacker with a basic script can open thousands of simultaneous connections, each consuming server memory, file descriptors, and CPU for WebSocket handshake processing, until the server becomes unresponsive to legitimate users.

Changes

• packages/engine.io/lib/server.ts

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security