Mercurial Mercurial > beremiz / changeset
summary | shortlog | changelog | graph | tags | bookmarks | branches | files | changeset | raw | bz2 | zip | gz | help
SVGHMI: stop serving HMI open wide on all interfaces. That was a security hole. It is user/developer responsibity to forward connection with for exemple stunnel and make it securely accessible from LAN. svghmi
authorEdouard Tisserant
Thu, 25 Mar 2021 10:48:24 +0100
branchsvghmi
changeset 3200 75cb73b4a606
parent 3199 1582753e409b
child 3202 5d379934d5c9
child 3204 856f4698a0a8
SVGHMI: stop serving HMI open wide on all interfaces. That was a security hole. It is user/developer responsibity to forward connection with for exemple stunnel and make it securely accessible from LAN.
svghmi/svghmi_server.py file | annotate | diff | comparison | revisions 
--- a/svghmi/svghmi_server.py	Thu Mar 25 10:13:12 2021 +0100
+++ b/svghmi/svghmi_server.py	Thu Mar 25 10:48:24 2021 +0100
@@ -173,7 +173,7 @@
     svghmi_root = Resource()
     svghmi_root.putChild("ws", WebSocketResource(HMIWebSocketServerFactory()))
 
-    svghmi_listener = reactor.listenTCP(8008, Site(svghmi_root))
+    svghmi_listener = reactor.listenTCP(8008, Site(svghmi_root), interface='localhost')
 
     # start a thread that call the C part of SVGHMI
     svghmi_send_thread = Thread(target=SendThreadProc, name="SVGHMI Send")
beremiz