Closed Bug 1543070 Opened 5 years ago Closed 5 years ago

Mode where we disable access to private and local IP addresses

Categories

(Core :: DOM: Networking, defect, P3)

Product:
Core
Component:
DOM: Networking
Type:
defect

Tracking

()

Status:
RESOLVED INVALID

People

(Reporter: annevk, Unassigned)

References

Details

(Whiteboard: [necko-triaged])

Depending on how the Cross-Origin discussion shakes out, we might need a mode where private and local IP addresses cannot be accessed.

Effectively, this means implementing https://wicg.github.io/cors-rfc1918/ on an opt-in basis except for the preflight bits (we would always reject instead for now).

[Note: necko has a 1918 flag.]

Setting it to P3 for now, let's see how the discussion goes.

Priority: -- → P3
Whiteboard: [necko-triaged]

This is no longer part of the design.

Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.