I filed some DevTools bugs for this: - Bug 2073466 - Check that blocked requests because of Connection-Allowlists header are properly displayed in Netmonitor <https://bugzilla.mozilla.org/show_bug.cgi?id=2073466> - Bug 2073448 - Add MDN link for Connection-Allowlist header <https://bugzilla.mozilla.org/show_bug.cgi?id=2073448>
On Friday, September 18, 2026 at 1:26:16 PM UTC+2 Tom Schuster wrote: > Summary: > The Connection-Allowlist header allows web developers to limit the servers > a website can communicate with. This can be used to prevent data > exfiltration attacks. > > Bug: Bug 2062159 <https://bugzilla.mozilla.org/show_bug.cgi?id=2062159> > > Specification: https://wicg.github.io/connection-allowlists/ > > Standards Body: > This specification is supposed to be adopted by the W3C Web Application > Security Working Group. > > Platform Coverage: All > > Preference: security.connection_allowlists.enabled > > DevTools Bug: None (The header would automatically show up) > > Extensions Bug: n/a > > Use Counter: tbd (Bug 2073432 > <https://bugzilla.mozilla.org/show_bug.cgi?id=2073432>) > > Standards-Positions Discussion: positive > <https://github.com/mozilla/standards-positions/issues/1322> > > Other Browsers: > - Blink: shipped (since 152 > <https://chromestatus.com/feature/5175745573945344>) > - WebKit: no signal ( > https://github.com/WebKit/standards-positions/issues/583) > > web-platform-tests: https://wpt.fyi/results/connection-allowlist > > -- You received this message because you are subscribed to the Google Groups "[email protected]" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/a/mozilla.org/d/msgid/dev-platform/403fe5c7-97e7-4ee8-a5fe-375e76f8a803n%40mozilla.org.
