fix: allow LAN access to the dev server - #532
Open
epheien wants to merge 1 commit into
Open
Conversation
Next 16 blocks cross-origin access to dev resources by default; the old allowedDevOrigins only covered 127.0.0.1 and 192.168.*.*, so visiting the dev server from a 10.x LAN address returned 403 on every /_next chunk and the HMR websocket. Allow loopback and the RFC1918 LAN ranges (10/8, 172.16/12, 192.168/16) so the dev server stays reachable from other machines on the same LAN.
epheien
force-pushed
the
fix/lan-access
branch
from
August 17, 2026 10:38
f504453 to
60fb9d2
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Problem
Next 16 blocks cross-origin access to dev resources by default. The previous
allowedDevOriginsonly covered127.0.0.1and192.168.*.*, so visiting the dev server from a10.xLAN address (e.g.10.9.8.12) returned 403 on every/_nextchunk and the HMR websocket failed, making the app unusable from other machines on the same LAN.Fix
Allow the loopback and all RFC1918 private ranges used by the dev server:
127.0.0.110.0.0.0/8172.16.0.0/12192.168.0.0/16Notes
allowedDevOriginsis dev-only).npm run devaccessed from a10.xLAN address: chunks and HMR websocket load correctly (eslintclean).