serve listens to all interfaces instead of localhost only

Open KingaJackowska opened this issue 3 years ago • 2 comments

It should not expose my files to other people in my wifi network. It is a very serious security issue!

14.0.1

v18.10.0

Oct 08 '22 18:10 KingaJackowska

I don't understand why it exposes files outside local host by default.

Oct 08 '22 18:10 rafrafek

It's not actually listening on non-loopback interfaces ... at least in version 14.0.1. See https://github.com/vercel/serve/issues/667

It is unsettling that the banner it prints doesn't tell you what it's actually doing.

Nov 06 '22 15:11 stacktracer