Repository navigation
Default configuration binds to public ip when no private ip available #2296
Description
Activity
- changed the title
[-]Security concerns with binding to all interfaces[/-][+]Default configuration binds to public ip when no private ip available[/+]on May 20, 2017 That regex does not match private ip addresses correctly. For example 192.0.0.0 is not a private address.
- added a commit that references this issue
on May 21, 2017 - added a commit that references this issue
on Jul 10, 2017 - added a commit that references this issue
on Aug 2, 2017 - locked and limited conversation to collaborators
on Jan 21, 2019 - added a commit that references this issue
on Oct 8, 2024
As reported in #2295, we allow access from your public ip address if you do not have a private one available. This isn't a good default.
To remedy this, we should make sure the address passes: