codex-flows/SECURITY.md

9 lines
333 B
Markdown
Raw Permalink Normal View History

2026-05-12 15:15:09 +00:00
# Security
`codex-bare` is a browser UI for a Codex app-server WebSocket. It does not add
authentication, authorization, persistence, or request filtering in front of the
app-server.
Keep the app-server bound to localhost or another trusted network boundary. Do
not expose the app-server WebSocket directly to the public internet.