<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<oembed><type>rich</type><version>1.0</version><provider_name>phorkie</provider_name><provider_url>https://p.cweiske.de/</provider_url><title>browser: secure context for localhost</title><author_name>Christian Weiske</author_name><cache_age>86400</cache_age><width>900</width><height>900</height><html>&lt;!-- embedding all files of https://p.cweiske.de/798 --&gt;
&lt;link rel="stylesheet" href="https://p.cweiske.de/css/embed.css"/&gt;
&lt;div class="phork" id="798"&gt;
    &lt;div class="phork-file"&gt;
 &lt;div class="phork-content"&gt;
  
&lt;div class="document"&gt;


&lt;p&gt;&lt;a class="reference external" href="https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Releases/84#security"&gt;https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Releases/84#security&lt;/a&gt;&lt;/p&gt;
&lt;blockquote&gt;
Firefox now ensures that localhost URLs — such as &lt;tt class="docutils literal"&gt;&lt;span class="pre"&gt;http://localhost/&lt;/span&gt;&lt;/tt&gt; and &lt;tt class="docutils literal"&gt;&lt;span class="pre"&gt;http://dev.localhost/&lt;/span&gt;&lt;/tt&gt; — refer to the local host's loopback interface (e.g. &lt;tt class="docutils literal"&gt;&lt;span class="pre"&gt;http://127.0.0.1&lt;/span&gt;&lt;/tt&gt;). As a result, resources loaded from localhost are now assumed to have been delivered securely&lt;/blockquote&gt;
&lt;p&gt;&lt;a class="reference external" href="https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts#when_is_a_context_considered_secure"&gt;https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts#when_is_a_context_considered_secure&lt;/a&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;p&gt;Locally-delivered resources such as those with &lt;tt class="docutils literal"&gt;&lt;span class="pre"&gt;http://127.0.0.1&lt;/span&gt;&lt;/tt&gt; URLs, &lt;tt class="docutils literal"&gt;&lt;span class="pre"&gt;http://localhost&lt;/span&gt;&lt;/tt&gt; and &lt;tt class="docutils literal"&gt;&lt;span class="pre"&gt;http://*.localhost&lt;/span&gt;&lt;/tt&gt; URLs (e.g. &lt;tt class="docutils literal"&gt;&lt;span class="pre"&gt;http://dev.whatever.localhost/&lt;/span&gt;&lt;/tt&gt;), and &lt;tt class="docutils literal"&gt;&lt;span class="pre"&gt;file://&lt;/span&gt;&lt;/tt&gt; URLs are also considered to have been delivered securely.&lt;/p&gt;
&lt;p&gt;Note: Firefox 84 and later support &lt;tt class="docutils literal"&gt;&lt;span class="pre"&gt;http://localhost&lt;/span&gt;&lt;/tt&gt; and &lt;tt class="docutils literal"&gt;&lt;span class="pre"&gt;http://*.localhost&lt;/span&gt;&lt;/tt&gt; URLs as trustworthy origins (earlier versions did not, because localhost was not guaranteed to map to a local/loopback address).&lt;/p&gt;
&lt;/blockquote&gt;
&lt;/div&gt;

 &lt;/div&gt;
 &lt;div class="phork-meta"&gt;
  &lt;a href="https://p.cweiske.de/798/rev-raw/58a79b13a21289d44c4e452a3efe05c1babfed21/README.rst" style="float: right"&gt;view raw source&lt;/a&gt;
  &lt;a href="https://p.cweiske.de/798#README.rst"&gt;README.rst&lt;/a&gt;
 &lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
</html></oembed>
