codex-flows/SECURITY.md
2026-05-12 15:15:09 +00:00

333 B

Security

codex-bare is a browser UI for a Codex app-server WebSocket. It does not add authentication, authorization, persistence, or request filtering in front of the app-server.

Keep the app-server bound to localhost or another trusted network boundary. Do not expose the app-server WebSocket directly to the public internet.