Intent to Prototype: Local network access restrictions for WebSockets

Contact emails

Explainer

Specification

Summary

Restricts the ability to make requests to the user's local network using WebRTC, gated behind a permission prompt. A local network request is any request from a public website to a local IP address or loopback, or from a local website (e.g. intranet) to loopback. Gating the ability for websites to perform these requests behind a permission reduces the ability of sites to use these requests to fingerprint the user's local network. This permission is restricted to secure contexts. This work is adding to the Local Network Access Restrictions work here: https://chromestatus.com/feature/5152728072060928

Blink component

Motivation

Local WebSockets connections are subject to many of the same attacks that the original LNA proposal are designed to solve. This would add the same controls that were implemented in the original LNA proposal to WebSockets

Initial public proposal

TAG review

TAG review status

Risks

Debuggability

None

Is this feature fully tested by web-platform-tests ?

Flag name on about://flags

Finch feature name

Requires code in //chrome?

Tracking bug

Estimated milestones

No milestones specified

Link to entry on the Chrome Platform Status