Introduce direct-sockets-private permissions policy and impose additional port restrictions - Githubissues

WICG / direct-sockets

Direct Sockets API for the web platform

Other

355 stars 14 forks source link

Introduce direct-sockets-private permissions policy and impose additional port restrictions #74

Closed GrapeGreen closed 2 weeks ago

GrapeGreen commented 1 month ago

This change outlines the direct-sockets-private permissions policy that roughly applies as follows:

For TCPSocket, if the destination address resolves to private
For UDPSocket (connected mode), if the destination address resolves to private
For UDPSocket (bound mode), always

On top of that, new port range restrictions are applied:

For TCPServerSocket, ports below 32678 are prohibited
For UDPSocket (bound mode), ports below 1024 are prohibited