Browser & Web Performance · Senior · Question 42 of 75
An internal service on http://192.168.0.10 should not be reachable by scripts on public websites. What browser mechanism addresses this?
- ✓Correct answer: Private (Local) Network Access protections: browsers restrict public sites from calling private addresses, via special preflights or a user permission prompt
- 2CSP
connect-srcon the internal service - 3HSTS on the public website
Explanation
Routers and dev servers have been attacked from web pages. Still, internal services must authenticate requests themselves.