The public README never mentioned that the control API binds 0.0.0.0 by default nor how to restrict it; the boot line also told users who had set [server] token that anyone could control playback. cc
The public README never mentioned that the control API binds 0.0.0.0 by default nor how to restrict it; the boot line also told users who had set [server] token that anyone could control playback. cc