if binding to 0.0.0.0, don't validate source ip in client api

src/httpapi/security/client.py

@@ -54,6 +54,7 @@ class ClientAPISecurity:
             """Validate request has set password & is the correct hostname."""
             # For the purpose of preventing DNS rebinding attacks
             localhost = True
+            if client_api.host != '0.0.0.0':
                 if request.host != '%s:%s' % \
                         (client_api.host, client_api.bindPort):
                     localhost = False

src/netcontroller/torcontrol/__init__.py

@@ -91,7 +91,7 @@ class NetController:
                     if '100' not in line.decode():
                         logger.info(line.decode().strip(), terminal=True)
                 if 'bootstrapped 100' in line.decode().lower():
-                    logger.info(line.decode())
+                    logger.info(line.decode(), terminal=True)
                     break
                 elif 'opening socks listener' in line.decode().lower():
                     logger.debug(line.decode().replace('\n', ''))