New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 657799 link

Starred by 3 users

Issue metadata

Status: Assigned
Owner:
Buried. Ping if important.
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 3
Type: Task



Sign in to add a comment

Deprecate loopback access from non-secure contexts.

Project Member Reported by mkwst@chromium.org, Oct 20 2016

Issue description

Apple proposed restricting access to loopback addresses from non-secure contexts in https://lists.w3.org/Archives/Public/public-webappsec/2016Oct/0032.html. This is in-line with the proposals in https://wicg.github.io/cors-rfc1918/ that we're experimenting with, and Mozilla seems on board as well: https://lists.w3.org/Archives/Public/public-webappsec/2016Oct/0037.html
 

Comment 2 by rbyers@chromium.org, Nov 18 2016

Components: Blink>SecurityFeature

Comment 3 by owe...@chromium.org, Sep 12 2017

Labels: migrated-launch-owp Type-Task
This issue has been automatically relabelled type=task because type=launch-owp issues are now officially deprecated. The deprecation is because they were creating confusion about how to get launch approvals, which should be instead done via type=launch issues.

We recommend this issue be used for implementation tracking (for public visibility), but if you already have an issue for that, you may mark this as duplicate.

For more details see here: https://docs.google.com/document/d/1JA6RohjtZQc26bTrGoIE_bSXGXUDQz8vc6G0n_sZJ2o/edit

For any questions, please contact owencm, sshruthi, larforge

Comment 4 by est...@chromium.org, Nov 10 2017

Labels: Hotlist-EnamelAndFriendsFixIt

Comment 5 by est...@chromium.org, Feb 18 2018

Labels: -Hotlist-EnamelAndFriendsFixIt
Labels: Hotlist-Interop

Sign in to add a comment