The security implications are no different than those for hosting any other web application which most developers are already comfortable doing.