Scaled-Tech-Consulting/Gitea-Tools
2
0
Fork 0
Code Issues 73 Pull Requests 9 Actions Packages Projects Releases Wiki Activity

fix: restore ISSUE_LOCK_FILE import and fail-closed public bind

Browse Source 
Conflict resolution left webui/lease_loader.py importing ISSUE_LOCK_FILE
from merged_cleanup_reconcile (not exported); import from
issue_lock_provenance instead. Validate WEBUI_HOST before loading the
full app stack so 0.0.0.0 refuse exits immediately.

Addresses reviewer findings on PR #456 / issue #435.
This commit is contained in:
sysadmin
2026-07-09 11:52:24 -04:00
parent 975674d7f5
commit 1334b0b320
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
webui/__main__.py
+5 -2
View File
@@ -7,7 +7,6 @@ import os
import uvicorn import uvicorn
from webui.app import create_app
from webui.deployment_boundary import assess_bind_host from webui.deployment_boundary import assess_bind_host
logger = logging.getLogger("webui") logger = logging.getLogger("webui")
@@ -25,9 +24,13 @@ def _validate_bind_host(host: str) -> None:
def main() -> None: def main() -> None:
host = os.environ.get("WEBUI_HOST", "127.0.0.1") host = os.environ.get("WEBUI_HOST", "127.0.0.1")
port = int(os.environ.get("WEBUI_PORT", "8765")) port = int(os.environ.get("WEBUI_PORT", "8765"))
# Validate bind host before importing the full app stack so refuse paths
# fail closed quickly (tests and operators must not hang on create_app).
_validate_bind_host(host) _validate_bind_host(host)
from webui.app import create_app
uvicorn.run(create_app(), host=host, port=port, log_level="info") uvicorn.run(create_app(), host=host, port=port, log_level="info")
if __name__ == "__main__": if __name__ == "__main__":
main() main()