SECURITY: bind app to 127.0.0.1 (localhost-only) so nginx Basic Auth cannot be bypassed via :9967 (Cody-caught PII exposure)

b6d80b4757be4f82534f83d91734d205342f27cb · 2026-08-11 08:57:57 -0700 · Steve

Files touched

M server.js

Diff

commit b6d80b4757be4f82534f83d91734d205342f27cb
Author: Steve <steve@designerwallcoverings.com>
Date:   Tue Aug 11 08:57:57 2026 -0700

    SECURITY: bind app to 127.0.0.1 (localhost-only) so nginx Basic Auth cannot be bypassed via :9967 (Cody-caught PII exposure)
---
 server.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server.js b/server.js
index 0f3606f..e0dd418 100644
--- a/server.js
+++ b/server.js
@@ -36,7 +36,7 @@ http.createServer((req, res) => {
     res.writeHead(200, { 'content-type': TYPES[path.extname(fp)] || 'application/octet-stream' });
     res.end(buf);
   });
-}).listen(PORT, () => console.log('DW Chat Analyzer → http://localhost:' + PORT));
+}).listen(PORT, '127.0.0.1', () => console.log('DW Chat Analyzer → http://127.0.0.1:' + PORT + ' (localhost-only; public access via nginx+auth)'));
 
 // Keep the dashboard data fresh: refresh data.json on boot (if stale) + every REFRESH_HOURS.
 const REFRESH_HOURS = Number(process.env.REFRESH_HOURS || 6);

← 83d1c2f Auto-refresh data.json on boot(if stale)+every 6h so deploye · back to Zendesk Chat Analyzer · Clamp /api/recent HOURS to 1h..7d (abuse guard, Cody) 0631d5f →