Default host should be: 0.0.0.0

[ricardojlrufino]

I think the default host should be: 0.0.0.0 and not localhost, so avoid having to keep changing when you put the server in production or in the local access network

[jfarcand]

Pull request welcomed :-)

[stuart-warren]

I realise I'm late to this issue but I have to disagree with this new default.
Surely you should have a secure default, only allow access to others by intentionally configuring it.
https://www.owasp.org/index.php/Secure_Coding_Principles#Establish_secure_defaults

You are suddenly allowing access, to a likely insecure webapp in development, to anyone on the local network...

[jfarcand]

@stuart-warren So you recommend letting localhost or a better value?

[stuart-warren]

Yes, localhost to me was a much saner default for the framework.
It's not hard for a developer to configure their app to 0.0.0.0 (or something else) when they are ready to change it, like you do here: https://github.com/Atmosphere/atmosphere-samples/blob/master/nettosphere-samples/chat/src/main/java/org/nettosphere/samples/chat/NettosphereChat.java#L43

[ricardojlrufino]

Hardly will startar a web server to run only as localhost, usually use to allow access to people within the network.