neocities VS private-network-access

You may really enjoy Neocities [0] it is full if websites that you explore.

[0] https://neocities.org/

Thriving creative community. Neocities

I'm surprised no-one's mentioned neocities (https://neocities.org/). It's open source (https://github.com/neocities).

Compare the copy on the landing pages and it’s pretty obvious

https://pages.cloudflare.com/

https://neocities.org/

If you are curious to find more interesting stuff, start here: – https://mojeek.com/ search engine with own index, totally different results - https://wiby.me/ another search engine, but "old school" kind of web sites. It does not mean that site cannot be new, but it just looks and feels like old school web pages. Funny way is use that "surprise me..." link there to find something - https://peelopaalu.neocities.org/ loooooots of interesting and random strange links to dig deeper on internet than just the sugar coated google-friendly web (aka. ad-friendly commercial web) - https://neocities.org/ the web page where is lots of sites hosted as somebody else already shared this as well there on comments - https://koshka.love/links.html Koshka's web page and its links to find more random stuff. There are interesting opinion texts on his site as well.

Neocities has taken steps to try to improve small personal web site discoverability, which ends up being like a platform for people making web sites with a hybrid social component https://neocities.org

I like the idea of calling this the small web, I usually go with something like "personal web site" or "home pages" but it's never quite stuck for me. I hope they've added Neocities to the Kagi small web search because there's some pretty incredible sites available for that: https://neocities.org/browse

Similar to neocities, but novel choice to allow the user to upload file(s) as part of the sign up process.

https://neocities.org

// man getsockname // Get client address int sockn = getsockname(request, (struct sockaddr*)&client_addr, (socklen_t*)&client_addrlen); if (sockn < 0) { JS_ThrowInternalError(ctx, "server error (getsockname): %s", strerror(errno)); continue; } char buffer[BUFFER_SIZE]; // man 2 read // Read from the socket int readable = read(request, buffer, BUFFER_SIZE); if (readable < 0) { JS_ThrowInternalError(ctx, "server error (read): %s", strerror(errno)); continue; } // man sscanf // man inet_ntoa // man ntohs // Read the request char method[128], uri[128], version[128]; sscanf(buffer, "%s %s %s", method, uri, version); // ... if (!strcmp(method, "QUERY") || !strcmp(method, "POST")) { // https://developer.chrome.com/blog/private-network-access-preflight/ // https://wicg.github.io/local-network-access/ char response[] = "HTTP/1.1 200 OK\r\n" "Server: webserver-c\r\n" "Cross-Origin-Opener-Policy: unsafe-none\r\n" "Connection: keepalive\r\n" "Cross-Origin-Embedder-Policy: unsafe-none\r\n" "Access-Control-Allow-Headers: cache-control\r\n" "Access-Control-Allow-Methods: OPTIONS,POST,GET,HEAD,QUERY\r\n" "Access-Control-Allow-Credentials: true\r\n" "Cache-Control: no-store\r\n" "Access-Control-Allow-Origin: *\r\n" "Content-type: text/plain\r\n" "Access-Control-Allow-Private-Network: true\r\n\r\n"; char* body_signal = strstr(buffer, "\r\n\r\n"); char* body = body_signal + 4; status(ctx, argv[1], body); uint8_t writable[65536]; int writer = write(request, response, strlen(response)); if (writer < 0) { return JS_ThrowInternalError(ctx, "server error (write): %s", strerror(errno)); } // man popen FILE* pipe = popen(body, "r"); if (pipe == NULL) { return JS_ThrowInternalError(ctx, "server error (popen): %s", strerror(errno)); } for (;;) { // man fread size_t count = fread(writable, 1, sizeof(writable), pipe); int stream = write(request, writable, count); if (stream < 0 || count == 0) { // man pclose pclose(pipe); status(ctx, argv[1], "aborted"); break; } } close(request); for (int i = 0; i < sizeof(buffer) - 1; i++) { buffer[i] = '\0'; }

Because browsers make a distinction between private networks and public networks.

Has anyone done any testing/mitigation in regards to Chrome v107 and Cisco UC/CCE applications in regards to the Private Network Access changes?

See also: https://wicg.github.io/private-network-access/

Browser are also working to add IE6's zones* feature back in: https://wicg.github.io/private-network-access/

* I'm not actually sure if that did anything regarding cross-zone requests or if it was just "yeah, ActiveX is totally super-fine with me, as long as it comes from a trusted zone".

Yes. It's in the doc: https://wicg.github.io/private-network-access/

Of course one obvious workaround is to misconfigure your router to allocate from a non-private but unused/reserved address space. That way your internal network is also on the "outside".