From c45780d79bc047568e486ac181a3a9b39df85b60 Mon Sep 17 00:00:00 2001 From: Thorin-Oakenpants Date: Mon, 26 Oct 2020 10:34:54 +0000 Subject: [PATCH] 0701 PHP localhost + IPv6, fixes #1053 --- user.js | 1 + 1 file changed, 1 insertion(+) diff --git a/user.js b/user.js index 96c3b3c..1eabb13 100644 --- a/user.js +++ b/user.js @@ -378,6 +378,7 @@ user_pref("_user.js.parrot", "0700 syntax error: the parrot's given up the ghost * [NOTE] This is just an application level fallback. Disabling IPv6 is best done at an * OS/network level, and/or configured properly in VPN setups. If you are not masking your IP, * then this won't make much difference. If you are masking your IP, then it can only help. + * [NOTE] PHP defaults to IPv6 with "localhost". Use "php -S 127.0.0.1:PORT" * [TEST] https://ipleak.org/ * [1] https://github.com/arkenfox/user.js/issues/437#issuecomment-403740626 * [2] https://www.internetsociety.org/tag/ipv6-security/ (see Myths 2,4,5,6) ***/