From fd357ae6f23b5812242bf1ee1d284cbe47ddafa6 Mon Sep 17 00:00:00 2001
From: Kane York <rikingcoding@gmail.com>
Date: Fri, 15 Sep 2017 13:19:33 -0700
Subject: [PATCH] reject pongs for non-set-up clients

---
 socketserver/server/handlecore.go | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/socketserver/server/handlecore.go b/socketserver/server/handlecore.go
index 7824b05c..9cac001c 100644
--- a/socketserver/server/handlecore.go
+++ b/socketserver/server/handlecore.go
@@ -336,7 +336,9 @@ func RunSocketConnection(conn *websocket.Conn) {
 
 	conn.SetPongHandler(func(pongBody string) error {
 		client.Mutex.Lock()
-		client.pingCount = 0
+		if client.HelloOK { // do not accept PONGs until hello sent
+			client.pingCount = 0
+		}
 		client.Mutex.Unlock()
 		return nil
 	})