Electron local server is exposed on all interfaces

[ManuGowda]

Expected behavior

Modify the call to the listen function to include the host parameter such as app.listen(port, "127.0.0.1") . This will ensure that only attackers on the same network cannot access the local server

Actual behavior

The lisk desktop application launches a local web server on port 5659 that is exposed on all interfaces.

Steps to reproduce

lisk-desktop/app/server.js

Lines 4 to 26 in 8238f41

	const server = {
	init: (port) => {
	if (process.env.LISK_DESKTOP_URL) {
	return process.env.LISK_DESKTOP_URL;
	}
	const app = express();
	app.set('views', path.join(__dirname, '.'));
	app.use(express.static(path.join(__dirname, '.')));
	app.get('*', (req, res) => res.sendFile(path.join(__dirname, '../setup/react/index.html')));
	// catch 404 and forward to error handler
	app.use((req, res, next) => {
	const err = new Error('Not Found');
	err.status = 404;
	next(err);
	});
	app.listen(port);
	return `http://localhost:${port}/`;
	},
	};