google-labs-jules[bot] edfc6dc501 🔒 secure backend by binding uvicorn to localhost ...

🎯 What: Changed the uvicorn host binding from 0.0.0.0 to 127.0.0.1 in server/start.sh.
⚠️ Risk: Binding to 0.0.0.0 exposes the unauthenticated backend API to any network interface, potentially allowing unauthorized access.
🛡️ Solution: Binding to 127.0.0.1 ensures the FastAPI backend is only accessible from the local machine, relying on the Next.js frontend to securely proxy external requests.

Co-authored-by: LyAhn <27559362+LyAhn@users.noreply.github.com>

2026-04-29 11:07:47 +00:00

..

download_model.py

feat: add studio roadmap and streaming cleanup

2026-04-28 00:09:15 +01:00

pyproject.toml

feat: add studio roadmap and streaming cleanup

2026-04-28 00:09:15 +01:00

start.sh

🔒 secure backend by binding uvicorn to localhost

2026-04-29 11:07:47 +00:00

uv.lock

feat: add studio roadmap and streaming cleanup

2026-04-28 00:09:15 +01:00

vibevoice_server.py

🧹 Refactor model loading in vibevoice_server.py

2026-04-29 08:08:17 +00:00