What's Changed
-
feat(devops)!: add WithDevServerIP and change default listen to 127.0.0.1 by @JonXSnow in #789
BREAKING CHANGE: the default listen address changed from
0.0.0.0:52538 to 127.0.0.1:52538.The previous default (0.0.0.0) binds to all network interfaces,
which means any device on the same network can access the devops
debug API. For example, an attacker on the same LAN could send
crafted requests to /eino/devops/debug/v1/graphs/{id}/threads to
trigger arbitrary Graph debug execution and inspect internal state.
Changing the default to 127.0.0.1 restricts access to localhost only
Full Changelog: components/model/openai/v0.1.13...devops/v0.1.9