Pinafore is not just on localhost, but on all interfaces

[kescherCode]

When starting the server for Pinafore using PORT=4002 node server.js, the server is in fact opened on all interfaces, not only localhost:4002.

[nolanlawson]

This would be a backwards-incompatible change. What is your use case for listening only on localhost? Would you be okay with an option to only listen on localhost?

[kescherCode]

I would've expected it not to listen on all interfaces, especially since for the Docker instruction in the README, it says it listens on localhost.

But yes, an option to only use localhost would be fine.

[NickColley]

@kescherCode can you give any more detail to what issue this causes you?

[kescherCode]

Since Pinafore is, from what I can tell, typically not supposed to be exposed on all interfaces, but rather behind a reverse proxy, it would make that port needlessly accessible whenever it's not firewalled off.