wikipedia appears to infers websockets are secure:
websockets
For web browser support, a secure version of the WebSocket protocol is implemented in Firef
Version hixie-76 of the WebSocket protocol is more secure than earlier versions, and version hybi-07 is even more secure. At hixie-76 version is added protection against fake requests. At hybi-07 version is added message masking.