fix(web): clarify wildcard host safety warning

2026-08-13 15:10:12 +08:00
parent 6cbf927e0a
commit 0633add19d
2 changed files with 2 additions and 2 deletions
@@ -67,7 +67,7 @@ export function apply(ctx: Context): void {
  program.action(() => {
    const options = program.opts<WebOptions>()
    if (options.host === '0.0.0.0') {
-      program.error('error: --host 0.0.0.0 is intentionally not supported yet; use 127.0.0.1 instead')
+      program.error('error: --host 0.0.0.0 is intentionally not supported yet for safety: it would expose remote code execution to the network; use 127.0.0.1 instead')
    }
    if (options.port !== undefined && !/^\d+$/.test(options.port)) {
      program.error(`error: --port must be a number, got ${JSON.stringify(options.port)}`)