← back to v132 · ignore-strict-transport-security-for-localhost
conformance · v132
v132 · ignore-strict-transport-security-for-localhost — conformance probe
5 assertions drawn from the spec. Each is a single contract the spec text makes. Pass/fail reflects what this browser executed; blocked means the contract was not run because it needs user mediation, hardware, or another unavailable precondition. Open the page in Chrome stable / canary / Firefox / Safari to compare.
0
pass
0
fail
0
blocked
5
total
| id | contract | kind | verdict | detail |
|---|---|---|---|---|
fetch-is-function |
fetch() is exposed; HSTS upgrade behaviour applies during fetch/navigation. | typeof | … | |
url-localhost-is-potentially-trustworthy |
http://localhost is treated as a secure context per the Secure Contexts spec — the precondition that makes ignoring HSTS for localhost safe. spec ↗ | script | … | |
isSecureContext-on-localhost |
Documents served from http://localhost are secure contexts. (This assertion runs against the page that loads conformance.json; on chrome-platform-showcase.paulkinlan-ea.deno.net it returns true because the deployment is HTTPS.) | script | … | |
url-constructor-supports-http-localhost |
URL constructor accepts http://localhost:N as a valid URL. | script | … | |
localhost-127-equivalence |
URL parsing of http://127.0.0.1 retains the http: protocol — STS upgrades are also skipped for loopback IPs per the change. spec ↗ | script | … |