One thing that may not be clear: the plan here is to remove the header directly without a deprecation trial. On Wednesday, September 30, 2026 at 3:22:59 PM UTC-4 Chromestatus wrote:
> *Contact emails* > [email protected] > > *Explainer* > *No information provided* > > *Specification* > *No information provided* > > *Summary* > The Content Security Policy header treat-as-public-address was added as > part of Private Network Access to allow non-documents to declare themselves > as being in the public address space ( > https://wicg.github.io/private-network-access/#csp). It is primarily > useful for testing. > https://github.com/WICG/private-network-access/issues/88 highlights some > issues with this header, and the decision was made to remove this header > instead of moving it somewhere else. For testing use cases, the > --ip-address-space-overrides command line flag can be used. This header was > only ever implemented in Chromium; Firefox has never implemented this > header and has no plans to. Safari has not implemented Private Network > Access or Local Network Access and so does not have the header either. > > *Blink component* > Blink > SecurityFeature > LocalNetworkAccess > <https://issues.chromium.org/issues?q=customfield1222907:%22Blink%20%3E%20SecurityFeature%20%3E%20LocalNetworkAccess%22> > > *Web Feature ID* > local-network-access <https://webstatus.dev/features/local-network-access> > > *Motivation* > Header does not fit well into Content Security Policy, and it was deemed > unnecessary given the alternative of using `--ip-address-space-overrides` > Metrics show this is barely used: > https://chromestatus.com/metrics/feature/timeline/popularity/5983 > > *Initial public proposal* > *No information provided* > > *Goals for experimentation* > None > > *Debuggability* > *No information provided* > > *Requires code in //chrome?* > False > > *Tracking bug* > https://issues.chromium.org/issues/527730705 > > *Estimated milestones* > > No milestones specified > > > *Link to entry on the Chrome Platform Status* > https://chromestatus.com/feature/5187021965492224?gate=5964820426915840 > > This intent message was generated by Chrome Platform Status > <https://chromestatus.com>. > -- You received this message because you are subscribed to the Google Groups "blink-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/80795d4e-33ef-4636-a047-c3d289026300n%40chromium.org.
