From 3540d14713072f96ab4dbcd6d8c4a2d7c0268e95 Mon Sep 17 00:00:00 2001
From: ReenigneArcher <42013603+ReenigneArcher@users.noreply.github.com>
Date: Sun, 15 Feb 2026 22:41:54 -0500
Subject: [PATCH] fix(webapp): bind to localhost instead of 0.0.0.0

Update src/common/webapp.py to run the app on 127.0.0.1 instead of 0.0.0.0. This restricts the server to localhost (reducing exposure to external networks) while keeping the same port (8080) and SSL context.
---
 src/common/webapp.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/common/webapp.py b/src/common/webapp.py
index 55a4732..f0462fd 100644
--- a/src/common/webapp.py
+++ b/src/common/webapp.py
@@ -363,7 +363,7 @@ def run():
     cert_file, key_file = crypto.initialize_certificate()
 
     app.run(
-        host="0.0.0.0",
+        host="127.0.0.1",
         port=8080,
         ssl_context=(cert_file, key_file)
     )