server: do not expose port to public by default

CVE-2021-34182 #692

diff --git a/src/server.c b/src/server.c
index cc398bc50fd285c1366725a59b0f0662f9100079..6e74bc2498c23c229f3fcabbe438eb46e8b10afc 100644 (file)
--- a/src/server.c
+++ b/src/server.c
@@ -324,7 +324,7 @@ int main(int argc, char **argv) {
   info.max_http_header_data = 65535;
 
   int debug_level = LLL_ERR | LLL_WARN | LLL_NOTICE;
-  char iface[128] = "";
+  char iface[128] = "127.0.0.1";
   char socket_owner[128] = "";
   bool browser = false;
   bool ssl = false;