OpenRefine currently does not support serving on unix sockets, but this should be trivial to implement. When time allows, we could submit a PR.

Listening on TCP ports in a context where other users have shell access means the proxied OpenRefine server can be accessed to anyone.

• Add a security notice to the OpenRefine component docs