From 2f9db8386873c33b9c7dfd47fd8da237dd5c63c7 Mon Sep 17 00:00:00 2001 From: Koushik Dutta Date: Thu, 25 Jul 2024 21:06:35 -0700 Subject: [PATCH] security: make default listen occur on loopback --- server/src/listen-zero.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/src/listen-zero.ts b/server/src/listen-zero.ts index 9e707c5ef..857141e65 100644 --- a/server/src/listen-zero.ts +++ b/server/src/listen-zero.ts @@ -8,7 +8,7 @@ export class ListenZeroSingleClientTimeoutError extends Error { } export async function listenZero(server: net.Server, hostname: string) { - server.listen(0, hostname); + server.listen(0, hostname || '127.0.0.1'); await once(server, 'listening'); return (server.address() as net.AddressInfo).port; }