From c869ba54eae9db770b5c3e84855850d7da4c2f86 Mon Sep 17 00:00:00 2001 From: Eric Feiveson Date: Wed, 25 Feb 2026 12:49:05 -0800 Subject: [PATCH] chore: Restrict GraphServer to localhost traffic only in Jupyter mode --- bigquery_magics/graph_server.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bigquery_magics/graph_server.py b/bigquery_magics/graph_server.py index 0089e97..fac2bb2 100644 --- a/bigquery_magics/graph_server.py +++ b/bigquery_magics/graph_server.py @@ -315,7 +315,7 @@ class ThreadedTCPServer(socketserver.TCPServer): # Daemon threads automatically terminate when the main program exits daemon_threads = True - with ThreadedTCPServer(("", self.port), GraphServerHandler) as httpd: + with ThreadedTCPServer(("127.0.0.1", self.port), GraphServerHandler) as httpd: self._server = httpd self._server.serve_forever()