Hi Hubert,

Thanks for driving the LNA restriction for WindowClient.navigate().

I have a question regarding the implementation in CL (
https://chromium-review.googlesource.com/c/chromium/src/+/7535636). The CL
seems to enforce a more general policy inheritance from the window to the
client, which appears to go beyond the LNA restriction alone.

I intended to raise the question of the rationale of this broader change
here, as I'm concerned the discussion has so far focused strictly on LNA. I
am particularly interested in how you assessed the impact of enforcing this
wider set of window-inherited policies, given the implementation's scope.
Could you elaborate on your assessment of the broader impact of this
implementation?

Best,
Yoshisato

2026年2月12日(木) 2:49 Hubert Chao <[email protected]>:

> On Wednesday, February 11, 2026 at 11:12:14 AM UTC-5 Alex Russell wrote:
>
> Hey Hubert,
>
> Dumb question: if someone is hosting a site (e.g., a PWA) on a local
> server (e.g., https://192.168.1.10/example.html), and that site uses a
> ServiceWorker, what changes when we ship this?
>
>
> Nothing should change. Currently, we don't enforce LNA restrictions for
> local -> loopback connections, so if the service worker has an IP address
> space of local (e.g. 192.168.1.10), then nothing it does should be an LNA
> request.
>
> /hubert
>

-- 
You received this message because you are subscribed to the Google Groups 
"blink-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAPNB-6Wtei-QXtnGGdPk-2X4NjOSu%2BGbc2U%2Bv6zUEEcz4wkf4w%40mail.gmail.com.

Reply via email to