“Eighteen years have passed, with hundreds of comments, but the bug remains open to this day.”
Public websites in Chrome, Firefox and Safari can reach services listening on 0.0.0.0 on macOS and Linux machines. Google’s Private Network Access was supposed to block that, and nobody put 0.0.0.0 on the list. Mozilla got the bug report in 2006, and Chrome’s fix won’t be complete until version 133. Eighteen years to block one address.