TLDR Web Dev · MISCELLANEOUS

EXPLAINER FOR LOCAL NETWORK ACCESS

github.com20 min read

Summary from the TLDR Web Dev newsletter

The Chrome Secure Web and Network team has proposed a new "Local Network Access" feature to mitigate security risks from websites probing and attacking devices on local networks. It will require user permission before a website can make requests to a private IP address or loopback, unlike the previous Private Network Access (PNA) proposal which relied on preflight requests. This approach involves gating local network requests behind a permission prompt, giving users more control over which sites can access their local network.