From 15f7e10609cdbcfc0ec418b872441270ffdb6402 Mon Sep 17 00:00:00 2001
From: alger <algerkc@qq.com>
Date: Wed, 4 Mar 2026 20:52:23 +0800
Subject: [PATCH] =?UTF-8?q?fix(=E5=AE=89=E5=85=A8):=20=E6=9C=AC=E5=9C=B0?=
 =?UTF-8?q?=E9=9F=B3=E4=B9=90=20API=20=E4=BB=85=E7=9B=91=E5=90=AC=E5=9B=9E?=
 =?UTF-8?q?=E7=8E=AF=E5=9C=B0=E5=9D=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/main/server.ts | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/main/server.ts b/src/main/server.ts
index e13dc81..764a479 100644
--- a/src/main/server.ts
+++ b/src/main/server.ts
@@ -67,7 +67,9 @@ async function startMusicApi(): Promise<void> {
 
   try {
     await server.serveNcmApi({
-      port
+      port,
+      // 安全默认值：仅监听本机回环地址，避免对局域网暴露
+      host: '127.0.0.1'
     });
     console.log(`MUSIC API STARTED on port ${port}`);
   } catch (error) {