TLDR Web Dev · MISCELLANEOUS
EXPLAINER FOR LOCAL NETWORK ACCESS
Summary from the TLDR Web Dev newsletter
The Chrome Secure Web and Network team has proposed a new "Local Network Access" feature to mitigate security risks from websites probing and attacking devices on local networks. It will require user permission before a website can make requests to a private IP address or loopback, unlike the previous Private Network Access (PNA) proposal which relied on preflight requests. This approach involves gating local network requests behind a permission prompt, giving users more control over which sites can access their local network.