Image missing.
A proposal to restrict sites from accessing a users’ local network

created: June 4, 2025, 6:15 p.m. | updated: June 6, 2025, 7:32 a.m.

Local Network Access aims to prevent these undesired requests to insecure devices on the local network. Proposed SolutionWe propose gating the ability for a site to make requests to the users' local network behind a new "local network access" permission. Local network requestsWe define a local network request as a request crossing an address space boundary to a more-private address space. That is, any of the following are considered to be local network requests:public -> local public -> loopback local -> loopbackNote that local -> local is not a local network request, as well as loopback -> anything. Permission promptsWhen a site makes a local network request, the UA should check if the origin has already been granted the "local network access" permission.

3 days, 13 hours ago: Hacker News