The Deno Desktop serving docs say the server is always bound to loopback, even if 0.0.0.0 is passed to Deno.serve():
https://docs.deno.com/runtime/desktop/serving/
That explains why it is not reachable from other machines, but the page also says other apps and other users on the same machine cannot reach it. That part seems stronger than loopback binding alone guarantees.
Could the docs clarify whether Deno Desktop only forces loopback binding, or whether there is additional local-process isolation involved?
The Deno Desktop serving docs say the server is always bound to loopback, even if
0.0.0.0is passed toDeno.serve():https://docs.deno.com/runtime/desktop/serving/
That explains why it is not reachable from other machines, but the page also says other apps and other users on the same machine cannot reach it. That part seems stronger than loopback binding alone guarantees.
Could the docs clarify whether Deno Desktop only forces loopback binding, or whether there is additional local-process isolation involved?