Local network access restrictions

[Pavel Aronovich]

Do I understand correctly that for an extension with chrome version 142, you need to set the LocalNetworkAccessAllowedForUrls policy? Is there no other way?

[Patrick Kettner]

Hello Pavel

For a policy perspective, there is also LocalNetworkAccessRestrictionsTemporaryOptOut. Otherwise, per the Local Network Access guide, as long as an extension has the correct host permissions, then they will not be impacted by this.

On Thu, Nov 6, 2025 at 11:35 AM Pavel Aronovich <pave...@gmail.com> wrote:

Do I understand correctly that for an extension with chrome version 142, you need to set the LocalNetworkAccessAllowedForUrls policy? Is there no other way?

--
You received this message because you are subscribed to the Google Groups "Chromium Extensions" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-extens...@chromium.org.
To view this discussion visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/5c22187c-c06d-4bc0-9435-255552ca1e69n%40chromium.org.

[Patrick Kettner]

What call is failing specifically?

What are you attempting to do, from what context, etc

On Thu, Nov 6, 2025 at 11:47 AM Pavel Aronovich <pave...@gmail.com> wrote:

"host_permissions": ["<all_urls>"]

but the error occurs anyway.

четверг, 6 ноября 2025 г. в 18:41:39 UTC+2, Patrick Kettner:

[Patrick Kettner]

This was a bug, that was fixed on November 5. Could you check to make sure you are in a version of chrome >=144.0.7512.0 ?

On Thu, Nov 6, 2025 at 1:01 PM Pavel Aronovich <pave...@gmail.com> wrote:

It is also important that the extension is set by the ExtensionSettings policy.

I think such extensions should have no restrictions at all.

четверг, 6 ноября 2025 г. в 18:52:16 UTC+2, Patrick Kettner:

[Jackie Han]

Another bug https://issues.chromium.org/issues/456078996 . Just fixed yesterday. 

To view this discussion visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/CAPAuxoC3V6nFmn2_Ax2zcYH7w-OqMSVy1Omig6JVsJKW4RRU3Q%40mail.gmail.com.

[Pavel Aronovich]

But do you see my messages?

четверг, 6 ноября 2025 г. в 18:52:16 UTC+2, Patrick Kettner:

What call is failing specifically?

[Pavel Aronovich]

"host_permissions": ["<all_urls>"]

but the error occurs anyway.

четверг, 6 ноября 2025 г. в 18:41:39 UTC+2, Patrick Kettner:

Hello Pavel

[Pavel Aronovich]

Why are my messages being deleted?

четверг, 6 ноября 2025 г. в 18:52:16 UTC+2, Patrick Kettner:

What call is failing specifically?

[Pavel Aronovich]

Fetch() is performed from the background service to the web server address on the same PC.

четверг, 6 ноября 2025 г. в 18:52:16 UTC+2, Patrick Kettner:

What call is failing specifically?

[Pavel Aronovich]

Setting the policy for the extension fixes the problem.

Error message:

Access to fetch at 'https://localhost/api/v1/checkSession?appID=15' from origin 'chrome-extension://xxxxxxx' has been blocked by CORS policy: Permission was denied for this request to access the `unknown` address space.

четверг, 6 ноября 2025 г. в 18:52:16 UTC+2, Patrick Kettner:

What call is failing specifically?

[Pavel Aronovich]

Moreover, I have a problem when connecting to a new WiFi network. I can't explain it. But the client had the same problem on the local network.

четверг, 6 ноября 2025 г. в 18:52:16 UTC+2, Patrick Kettner:

What call is failing specifically?

[Pavel Aronovich]

Thank you Patrick.

Version 142.0.7444.135 is currently available. When will it be possible to test on the new version?

суббота, 8 ноября 2025 г. в 12:38:29 UTC+2, Patrick Kettner:

[Pavel Aronovich]

It is also important that the extension is set by the ExtensionSettings policy.

I think such extensions should have no restrictions at all.

четверг, 6 ноября 2025 г. в 18:52:16 UTC+2, Patrick Kettner:

What call is failing specifically?

[Pavel Aronovich]

CSP in manifest:

  "content_security_policy": {
    "extension_pages": "script-src 'self'; style-src 'self' 'unsafe-inline'; worker-src 'self'; object-src 'none';"
  }

четверг, 6 ноября 2025 г. в 18:52:16 UTC+2, Patrick Kettner:

What call is failing specifically?