Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR. Learn more →
Private-network-access Alternatives
Similar projects and alternatives to private-network-access
-
-
CodeRabbit
CodeRabbit: AI Code Reviews for Developers. Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.
-
-
-
-
-
-
LAN-port-scan-forbidder
Forbid untrusted webs to access localhost or LAN. An anti-scan protection 🛡️🏡
-
InfluxDB
InfluxDB high-performance time series database. Collect, organize, and act on massive volumes of high-resolution data to power real-time intelligent systems.
-
-
-
-
private-network-access discussion
private-network-access reviews and mentions
-
Why do we have both CSRF protection and CORS?
You still can make many kinds of requests [0] to an arbitrary endpoint that isn't the page origin, without being able to see the response. (Basically, anything that a form submission could do.) And you can't include any cookies or other credentials in the request that don't have SameSite=None (except on ancient browsers), and if you do, then you still can't see the response unless the endpoint opts in.
Really, there's exactly one thing that CORS headers protect against: endpoints that authorize the request based on the requester's IP address and nothing else. (The biggest case of this would be local addresses in the requester's network, but they've been planning on adding even more required headers for that [1].) They don't protect against data exfiltration, third-party cookie exfiltration (that's what the SameSite directive is for), or any other such attack vector.
[0] https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#simpl...
[1] https://wicg.github.io/private-network-access/
- CORS Is Stupid
- Why does server exit with body over certain length?
-
Basic HTML/JS page is able to access a webservice on my intranet, when run locally - but is unable to access my web-service when hosted as a static S3 bucket site.
Because browsers make a distinction between private networks and public networks.
-
Chrome v107 (Releasing 10/25) Impact on Contact Center Applications
Has anyone done any testing/mitigation in regards to Chrome v107 and Cisco UC/CCE applications in regards to the Private Network Access changes?
- Private Network Access web standard
- Private Network Access Specification
-
LAN-port-scan forbidder, browser addon to protect private network
See also: https://wicg.github.io/private-network-access/
-
What does 2022 have in store for cybersecurity and cloud security specialists?
Browser are also working to add IE6's zones* feature back in: https://wicg.github.io/private-network-access/
* I'm not actually sure if that did anything regarding cross-zone requests or if it was just "yeah, ActiveX is totally super-fine with me, as long as it comes from a trusted zone".
-
A note from our sponsor - CodeRabbit
coderabbit.ai | 26 Apr 2025
Stats
WICG/private-network-access is an open source project licensed under GNU General Public License v3.0 or later which is an OSI approved license.
The primary programming language of private-network-access is HTML.
Popular Comparisons
- private-network-access VS neocities
- private-network-access VS webserver-c
- private-network-access VS LAN-port-scan-forbidder
- private-network-access VS mdns-discovery-proxy
- private-network-access VS filter-lists
- private-network-access VS node-red-contrib-sqlstring
- private-network-access VS native-messaging-c
- private-network-access VS Node RED
- private-network-access VS enso
- private-network-access VS acme.sh