Connection Allowlists

[shivanigithub]

Specification

https://wicg.github.io/connection-allowlists/

Description

Connection Allowlists is a feature designed to provide explicit control over external endpoints by restricting connections initiated via the Fetch API or other web platform APIs from a document or worker.

Documentation

https://github.com/WICG/connection-allowlists

Browser support

No response

[ddbeck]

Thanks for filing this, @shivanigithub. I'm making some notes on this feature, as I understand it.

Standards positions:

• Connection Allowlists WebKit/standards-positions#583
• Connection Allowlists mozilla/standards-positions#1322

I couldn't find signs of implementation here (i.e., no shipping soon indicators), so I've tagged this as an "early feature" that is going to be lower priority than some other entry requests.

Based on the spec, I'd expect to add the following keys to BCD, when there's an implementer:

• http.headers.Connection-Allowlist
• http.headers.Connection-Allowlist-Report-Only
• api.ReportingObserver.ReportingObserver.options_parameter.types_property (see Report type types coep mdn/browser-compat-data#27047)

A description in web-features is likely to be something along the lines of:

The Connection-Allowlist HTTP response header limits what resources that the page may request using fetch and other web platform APIs.

[shivanigithub]

/cc @mikewest

I couldn't find signs of implementation here (i.e., no shipping soon indicators), so I've tagged this as an "early feature" that is going to be lower priority than some other entry requests.

In chromium it is soon going to be in the origin trial state.
chromestatus entry