demo · v144 · security

LNA Permission Flow

Try to connect a WebTransport session to a private-network host (e.g. https://192.168.1.1:443/...) from a public-origin page. Chrome 144 fires the Local Network Access permission prompt before opening; without consent the connection is rejected.

Phase 1 enforcement This demo will succeed only if (a) the URL points to a reachable local WebTransport endpoint and (b) you grant the LNA prompt. CSP, mixed-content, and the prompt itself can all block before the network round-trip.

WebTransport: checking…

enter a URL to test…

the API

// Same WebTransport API — new permission gate.
const wt = new WebTransport("https://192.168.1.1:4433/control");
try {
  await wt.ready;
  // user consented and endpoint is reachable
} catch (err) {
  // err.message includes "Local Network Access permission denied"
  // when the user denies the prompt.
}

see also