RESOLVED FIXED319907
Add the Local Network Access check algorithm and a NetworkProcess-resident permission stub 
https://bugs.webkit.org/show_bug.cgi?id=319907
Summary Add the Local Network Access check algorithm and a NetworkProcess-resident pe...
Ian Gower
Reported 2026-07-21 11:02:43 PDT
Adds WebCore::performLocalNetworkAccessCheck(), implementing the spec's check algorithm: a same-origin/potentially-trustworthy exemption, an explicit targetAddressSpace opt-in/mismatch check, a general publicness comparison via IPAddressSpace's isLessPublicThan(), and a fail-closed result for non-secure contexts. Also adds a test-only permission stub (NetworkSession-resident, reachable via Internals) since no native permission prompt exists yet — a Prompt decision is treated as Denied until one does. Part of the Local Network Access enforcement work (meta bug 250607).
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2026-07-21 11:02:50 PDT
<rdar://problem/182830329>
Ian Gower
Comment 2 2026-07-23 15:58:52 PDT
Pull request: https://github.com/WebKit/WebKit/pull/70064
Ian Gower
Comment 3 2026-07-28 11:09:30 PDT
Pull request: https://github.com/WebKit/WebKit/pull/70361
Ian Gower
Comment 4 2026-08-28 12:10:03 PDT
Pull request: https://github.com/WebKit/WebKit/pull/72725
EWS
Comment 5 2026-09-11 15:50:36 PDT
Committed 320971@main (944f82d72ae7): <https://commits.webkit.org/320971@main> Reviewed commits have been landed. Closing PR #72725 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.