{"type":"rich","version":"1.0","provider_name":"phorkie","provider_url":"https:\/\/p.cweiske.de\/","title":"browser: secure context for localhost","author_name":"Christian Weiske","cache_age":86400,"width":900,"height":900,"html":"\n\n
\n
\n
\n \n
\n\n\n

https:\/\/developer.mozilla.org\/en-US\/docs\/Mozilla\/Firefox\/Releases\/84#security<\/a><\/p>\n

\nFirefox now ensures that localhost URLs \u2014 such as http:\/\/localhost\/<\/span><\/tt> and http:\/\/dev.localhost\/<\/span><\/tt> \u2014 refer to the local host's loopback interface (e.g. http:\/\/127.0.0.1<\/span><\/tt>). As a result, resources loaded from localhost are now assumed to have been delivered securely<\/blockquote>\n

https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/Security\/Secure_Contexts#when_is_a_context_considered_secure<\/a><\/p>\n

\n

Locally-delivered resources such as those with http:\/\/127.0.0.1<\/span><\/tt> URLs, http:\/\/localhost<\/span><\/tt> and http:\/\/*.localhost<\/span><\/tt> URLs (e.g. http:\/\/dev.whatever.localhost\/<\/span><\/tt>), and file:\/\/<\/span><\/tt> URLs are also considered to have been delivered securely.<\/p>\n

Note: Firefox 84 and later support http:\/\/localhost<\/span><\/tt> and http:\/\/*.localhost<\/span><\/tt> URLs as trustworthy origins (earlier versions did not, because localhost was not guaranteed to map to a local\/loopback address).<\/p>\n<\/blockquote>\n<\/div>\n\n <\/div>\n

\n view raw source<\/a>\n README.rst<\/a>\n <\/div>\n<\/div>\n<\/div>\n"}