[Android] Remote Access: restrict anyHost to debug builds

[Nicolas Pomepuy]

vlc-android | branch: master | Nicolas Pomepuy <nicolas at videolabs.io> | Mon Jul 20 11:50:46 2026 +0200| [42715c63959a76677cb0f467d0ecc84e16047058] | committer: Duncan McNamara

Remote Access: restrict anyHost to debug builds

> https://code.videolan.org/videolan/vlc-android/commit/42715c63959a76677cb0f467d0ecc84e16047058
---

 .../java/org/videolan/vlc/remoteaccessserver/RemoteAccessServer.kt     | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/application/remote-access-server/src/main/java/org/videolan/vlc/remoteaccessserver/RemoteAccessServer.kt b/application/remote-access-server/src/main/java/org/videolan/vlc/remoteaccessserver/RemoteAccessServer.kt
index 8009157b3f..b83c663d80 100644
--- a/application/remote-access-server/src/main/java/org/videolan/vlc/remoteaccessserver/RemoteAccessServer.kt
+++ b/application/remote-access-server/src/main/java/org/videolan/vlc/remoteaccessserver/RemoteAccessServer.kt
@@ -628,7 +628,8 @@ class RemoteAccessServer(private val context: Context) : PlaybackService.Callbac
                     allowMethod(HttpMethod.Get)
                     allowHeader(HttpHeaders.AccessControlAllowOrigin)
                     allowHeader(HttpHeaders.ContentType)
-                    anyHost()
+                    if (BuildConfig.VLC_REMOTE_ACCESS_DEBUG)
+                        anyHost()
                 }
                 install(PartialContent)
                 install(AutoHeadResponse)