Please open a minimal issue or contact the maintainers privately. Do not include exploit details in public until a fix is available.

projecast is for interoperability with projector hardware you own, on your own network. It performs no encryption of the media stream (the original protocol does not); treat the LAN it runs on as the trust boundary. The HTTP API binds to all interfaces by default so other devices on your LAN can use it — restrict this (firewall, or bind to localhost) if that is not what you want.

See NOTICE. This is a clean-room reimplementation for interoperability and is not affiliated with any vendor. If you intend to ship a commercial product built on this, get your own legal review first.