v147 · Security · Local Network Access

WebSocket Security Audit

Paste JavaScript code and click Audit. The tool scans for WebSocket connections, rates each by Local Network Access risk, shows the required response headers, and generates a server-side fix snippet.

Chrome 147: ws:// connections from public origins to local IPs (localhost, 192.168.x, 10.x, 172.16.x–172.31.x) now require a preflight response with Access-Control-Allow-Private-Network: true.

Paste code to audit

Load a preset or paste your own JavaScript containing new WebSocket() calls.

JavaScript

references

implementation reference

Need the exact API surface, compatibility boundaries, errors, lifecycle, and source links? Read the matching gendn reference ↗