johan
/
clavitor
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix TASK-009: Bind dev server to localhost only (127.0.0.1) 

Security fix: Changed from 0.0.0.0 (all interfaces) to 127.0.0.1 (localhost only)

Files modified:
- design-system/server.go
- design-system/server-temp.go

Before: http.ListenAndServe(0.0.0.0:8888, ...) - exposed on LAN/WAN
After:  http.ListenAndServe(127.0.0.1:8888, ...) - localhost only

Note: server-temp.go has 60-minute auto-shutdown. Dev server was not running
at time of fix (likely auto-shut or manually killed).
This commit is contained in:
James 2026-03-23 00:30:53 -04:00
parent 20d6a745c9
commit 6d79638ef3
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
design-system/server-temp.go
View File

@ -23,11 +23,11 @@ func main() {
defer cancel() defer cancel()
server := &http.Server{ server := &http.Server{
Addr: "0.0.0.0:8888", Addr: "127.0.0.1:8888",
Handler: handler, Handler: handler,
} }
log.Println("Serving on http://192.168.1.16:8888") log.Println("Serving on http://127.0.0.1:8888")
log.Println("Auto-shutdown in 60 minutes") log.Println("Auto-shutdown in 60 minutes")
// Run server in goroutine // Run server in goroutine

4
design-system/server.go
View File

@ -16,6 +16,6 @@ func main() {
fs.ServeHTTP(w, r) fs.ServeHTTP(w, r)
}) })
log.Println("Serving on http://192.168.1.16:8888") log.Println("Serving on http://127.0.0.1:8888")
log.Fatal(http.ListenAndServe("0.0.0.0:8888", handler)) log.Fatal(http.ListenAndServe("127.0.0.1:8888", handler))
} }