fix(canvas-host): bind to loopback by default

This commit is contained in:
Jeditrix 2026-01-26 22:28:47 +00:00
parent 820ab8765a
commit 01e15de314

View File

@ -385,7 +385,7 @@ export async function startCanvasHost(opts: CanvasHostServerOpts): Promise<Canva
}));
const ownsHandler = opts.ownsHandler ?? opts.handler === undefined;
const bindHost = opts.listenHost?.trim() || "0.0.0.0";
const bindHost = opts.listenHost?.trim() || "127.0.0.1";
const server: Server = http.createServer((req, res) => {
if (String(req.headers.upgrade ?? "").toLowerCase() === "websocket") return;
void (async () => {