search

git-learning-game / oh-my-git

An interactive Git learning game!
https://ohmygit.org
Other
2k stars 145 forks source link

Bind to global ports is dangerous #158

Open xim opened 1 year ago

xim commented 1 year ago

Binding to global ports using TCP_Server.listen is really dangerous. E.g. the fake_editor stuff will allow any remote host to overwrite any local file at will. Binds should be made to 127.0.0.1.