Make miniserver bind to 0.0.0.0 by default

Description

This is a bit presumptuous as it assumes the user is ok with their local dev server being accessible to the entire world, but it also makes it easier to use in Docker or WSL as these environments don’t allow access to services which bind to localhost.

Activity

Show:

Jon Clausen February 22, 2025 at 1:50 AM
Edited

For the record, I vehemently oppose this change. If the miniserver becomes widely adopted, this will end up being a security issue that we have to revert.

Anyone using it with security scanning software is going to get flagged right out of the gate. The same applies to CommandBox if we choose to bind to all interfaces by default

Fixed
Pinned fields
Click on the next to a field label to start pinning.

Details

Assignee

Reporter

Fix versions

Priority

Sentry

Created February 21, 2025 at 9:33 PM
Updated February 22, 2025 at 1:53 AM
Resolved February 21, 2025 at 9:33 PM