Hacker News new | ask | show | jobs
by bawolff 1100 days ago
I thought chrome was now blocking this anyways unless you specificly opt in with CORS.
1 comments
oefrha 1100 days ago
It’s called Private Network Access and it’s still behind an experimental flag for now.

https://wicg.github.io/private-network-access/

https://developer.chrome.com/blog/private-network-access-upd...

Also ws/wss has no SOP/CORS which could be a problem, but that has nothing do with the domain blocking here.

link
charcircuit 1100 days ago
The link you gave said it released 2 years ago in Chrome 94.
link
oefrha 1100 days ago
That's why I said "behind an experimental flag". Search for "private network" in chrome://flags.

Oh I see what you mean. The default blocking behavior in Chrome 94 only applies to public non-secure contexts. We’re talking about a stricter form applied to secure contexts here.

link