{
  "port": 7900,
  "protocol": "tcp",
  "service": "noVNC (Selenium containers)",
  "oneLiner": "On any CI or Selenium host this is noVNC — a browser-viewable live view into a container's desktop.",
  "whatItIs": "The official Selenium Docker images publish 7900 for noVNC, so you can watch a test run by opening http://localhost:7900/?autoconnect=1&resize=scale&password=secret. It is an HTTP endpoint that proxies the container's VNC server into a web page. IANA registers 7900 as mevent, Multicast Event, but that assignment carries no implementation you are likely to meet. If 7900 is open on a build agent or a Kubernetes node, look for selenium/standalone-* or selenium/node-* containers.",
  "exposure": {
    "verdict": "never",
    "note": "The documented default password is literally \"secret\", and access grants full interactive control of a real browser session — including whatever it is logged into. Keep it on localhost or a private network."
  },
  "checkCommand": "curl -sI http://127.0.0.1:7900/",
  "links": [
    {
      "title": "SeleniumHQ/docker-selenium — noVNC on port 7900",
      "url": "https://github.com/SeleniumHQ/docker-selenium",
      "kind": "github"
    },
    {
      "title": "IANA port registry — 7900 (mevent)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=7900",
      "kind": "iana"
    }
  ]
}
