Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

default IP address setting #2610

Closed
lxning opened this issue Sep 22, 2023 · 0 comments 路 Fixed by #2624 or #2646
Closed

default IP address setting #2610

lxning opened this issue Sep 22, 2023 · 0 comments 路 Fixed by #2624 or #2646
Assignees
@namannandan @udaij12
Labels
security
Projects
v0.9.0 lifecycle

Comments

@lxning
Copy link
Collaborator

lxning commented Sep 22, 2023

馃殌 The feature

  1. There are multiple places using "0.0.0.0" as default address. It should be replaced with localhost.
  • examples
  • config.properties
  • code
  • launcher.gradle
  • Dockerfile
  1. Server throws fatal error if "0.0.0.0" is set in dev docker.
  2. Server throws error if "0.0.0.0" is set in prod docker.

Motivation, pitch

the management interface API is bound to the 0.0.0.0 address by default, making it accessible to external requests. This exposes a potential security risk to unauthorized access.

Alternatives

No response

Additional context

No response
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@namannandan namannandan

@udaij12 udaij12

Labels
security
Projects
v0.9.0 lifecycle
Awaiting triage
Milestone
No milestone
3 participants
@namannandan @lxning @udaij12