only accept connections from localhost (#98)

(cherry picked from commit 79e9d97)
kiegroup · Jan 15, 2024 · fd189a8 · fd189a8
1 parent 79d9107
commit fd189a8
Showing 1 changed file with 7 additions and 5 deletions.
diff --git a/...api/src/main/java/org/drools/ansible/rulebook/integration/api/io/RuleExecutorChannel.java b/...api/src/main/java/org/drools/ansible/rulebook/integration/api/io/RuleExecutorChannel.java
@@ -1,17 +1,18 @@
 package org.drools.ansible.rulebook.integration.api.io;
 
+import org.drools.ansible.rulebook.integration.api.rulesengine.AsyncExecutor;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+
 import java.io.DataOutputStream;
 import java.io.IOException;
 import java.io.UncheckedIOException;
+import java.net.InetAddress;
 import java.net.ServerSocket;
 import java.net.Socket;
 import java.net.StandardSocketOptions;
 import java.nio.charset.StandardCharsets;
 
-import org.drools.ansible.rulebook.integration.api.rulesengine.AsyncExecutor;
-import org.slf4j.Logger;
-import org.slf4j.LoggerFactory;
-
 import static org.drools.ansible.rulebook.integration.api.io.JsonMapper.toJson;
 
 public class RuleExecutorChannel {
@@ -25,7 +26,8 @@ public class RuleExecutorChannel {
 
     public RuleExecutorChannel() {
         try {
-            socketChannel = new ServerSocket(0); // 0 means kernel will choose a free port
+            InetAddress bindAddr =  InetAddress.getByName("127.0.0.1");
+            socketChannel = new ServerSocket(0, 50, bindAddr); // 0 means kernel will choose a free port
             socketChannel.setOption(StandardSocketOptions.SO_REUSEADDR, true);
         } catch (IOException e) {
             throw new RuntimeException(e);