A proposal to restrict sites from accessing a users’ local network
created: June 4, 2025, 6:15 p.m. | updated: June 6, 2025, 7:32 a.m.
Local Network Access aims to prevent these undesired requests to insecure devices on the local network.
Proposed SolutionWe propose gating the ability for a site to make requests to the users' local network behind a new "local network access" permission.
Local network requestsWe define a local network request as a request crossing an address space boundary to a more-private address space.
That is, any of the following are considered to be local network requests:public -> local public -> loopback local -> loopbackNote that local -> local is not a local network request, as well as loopback -> anything.
Permission promptsWhen a site makes a local network request, the UA should check if the origin has already been granted the "local network access" permission.
3 days, 13 hours ago: Hacker News