From 66369fc87e896673386943ff9896eb3f70c0cc35 Mon Sep 17 00:00:00 2001 From: louzt Date: Mon, 15 Jun 2026 00:59:26 -0600 Subject: [PATCH] fix(restream): bind web server to 127.0.0.1 instead of 0.0.0.0 The restream HLS server was binding to all interfaces (0.0.0.0), exposing the stream to LAN/WAN without authentication. Now binds to localhost only (127.0.0.1), preventing external access. Refs: https://github.com/Fredolx/open-tv/issues/424 --- src-tauri/src/restream.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src-tauri/src/restream.rs b/src-tauri/src/restream.rs index dbd9895e..5f693d5f 100644 --- a/src-tauri/src/restream.rs +++ b/src-tauri/src/restream.rs @@ -91,7 +91,7 @@ async fn start_web_server( let file_server = warp::fs::dir(restream_dir); let (tx, rx) = oneshot::channel::(); let (_, server) = - warp::serve(file_server).bind_with_graceful_shutdown(([0, 0, 0, 0], port), async { + warp::serve(file_server).bind_with_graceful_shutdown(([127, 0, 0, 1], port), async { rx.await.ok(); }); let handle = tokio::spawn(server);