LGTM1 On Wed, Sep 30, 2026 at 12:25 PM Hubert Chao <[email protected]> wrote:
> One thing that may not be clear: the plan here is to remove the header > directly without a deprecation trial. > On Wednesday, September 30, 2026 at 3:22:59 PM UTC-4 Chromestatus wrote: > >> *Contact emails* >> [email protected] >> >> *Explainer* >> *No information provided* >> >> *Specification* >> *No information provided* >> >> *Summary* >> The Content Security Policy header treat-as-public-address was added as >> part of Private Network Access to allow non-documents to declare themselves >> as being in the public address space ( >> https://wicg.github.io/private-network-access/#csp). It is primarily >> useful for testing. >> https://github.com/WICG/private-network-access/issues/88 highlights some >> issues with this header, and the decision was made to remove this header >> instead of moving it somewhere else. For testing use cases, the >> --ip-address-space-overrides command line flag can be used. This header was >> only ever implemented in Chromium; Firefox has never implemented this >> header and has no plans to. Safari has not implemented Private Network >> Access or Local Network Access and so does not have the header either. >> >> *Blink component* >> Blink > SecurityFeature > LocalNetworkAccess >> <https://issues.chromium.org/issues?q=customfield1222907:%22Blink%20%3E%20SecurityFeature%20%3E%20LocalNetworkAccess%22> >> >> *Web Feature ID* >> local-network-access >> <https://webstatus.dev/features/local-network-access> >> >> *Motivation* >> Header does not fit well into Content Security Policy, and it was deemed >> unnecessary given the alternative of using `--ip-address-space-overrides` >> Metrics show this is barely used: >> https://chromestatus.com/metrics/feature/timeline/popularity/5983 >> >> *Initial public proposal* >> *No information provided* >> >> *Goals for experimentation* >> None >> >> *Debuggability* >> *No information provided* >> >> *Requires code in //chrome?* >> False >> >> *Tracking bug* >> https://issues.chromium.org/issues/527730705 >> >> *Estimated milestones* >> >> No milestones specified >> >> >> *Link to entry on the Chrome Platform Status* >> https://chromestatus.com/feature/5187021965492224?gate=5964820426915840 >> >> This intent message was generated by Chrome Platform Status >> <https://chromestatus.com>. >> > -- > You received this message because you are subscribed to the Google Groups > "blink-dev" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion visit > https://groups.google.com/a/chromium.org/d/msgid/blink-dev/80795d4e-33ef-4636-a047-c3d289026300n%40chromium.org > <https://groups.google.com/a/chromium.org/d/msgid/blink-dev/80795d4e-33ef-4636-a047-c3d289026300n%40chromium.org?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "blink-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAOMQ%2Bw_a76_7KM6HyPbs%3DkLyWiLZ7bK%2BUUv6GjVJdgFUqCFvGw%40mail.gmail.com.
