security: bind server to 127.0.0.1 so the tunnel/proxy basic-auth gate can't be bypassed on the LAN

c7742277cd42286c83d509654390fd073369651f · 2026-07-16 07:51:19 -0700 · Steve

Files touched

M server.js

Diff

commit c7742277cd42286c83d509654390fd073369651f
Author: Steve <steve@designerwallcoverings.com>
Date:   Thu Jul 16 07:51:19 2026 -0700

    security: bind server to 127.0.0.1 so the tunnel/proxy basic-auth gate can't be bypassed on the LAN
---
 server.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server.js b/server.js
index a31e463..c15720f 100644
--- a/server.js
+++ b/server.js
@@ -240,7 +240,7 @@ http.createServer(async (req, res) => {
 
   res.writeHead(404); res.end('not found');
 
-}).listen(PORT, function () {
+}).listen(PORT, '127.0.0.1', function () {
   console.log(`[sample-box] http://localhost:${this.address().port}`);
   console.log(`[sample-box] /admin — set BASIC_AUTH=user:pass to gate`);
   console.log(`[sample-box] BOX PRICE $${BOX_PRICE.toFixed(2)} — TEST MODE, no real charges`);

← dea3d5d shopify: numeric sample variant id for working cart permalin · back to Sample Box · auto-save: 2026-07-16T08:12:03 (1 files) — data/shopify-cata d56008b →