server: do not expose port to public by default

CVE-2021-34182 #692
tsl0922 · Apr 27, 2023 · 3920608 · 3920608
1 parent e12f321
commit 3920608
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/server.c b/src/server.c
@@ -324,7 +324,7 @@ int main(int argc, char **argv) {
   info.max_http_header_data = 65535;
 
   int debug_level = LLL_ERR | LLL_WARN | LLL_NOTICE;
-  char iface[128] = "";
+  char iface[128] = "127.0.0.1";
   char socket_owner[128] = "";
   bool browser = false;
   bool ssl = false;