[Localhost Permission] V2

[ShivanKaul]

Meta-issue for version 2 of the localhost permission feature: https://brave.com/privacy-updates/27-localhost-permission/

1. [Localhost Permission] Check IP address when deciding if a request is localhost #30038
2. [Localhost Permission] Come up with better design/UI for the localhost permission prompt #31687

Needs more investigation:

1. [Localhost Permission] Require user activation for page requesting localhost permission #31688
2. Allow specific localhost resources to be accessible by all websites. #30181

[ShardPhoenix]

Possibly related: I can't find any setting to allow localhost access in the latest version for Mac, 1.57.62. The url brave://settings/content/localhostAccess redirects to brave://settings and searching in settings for localhost finds nothing. It does work with Chrome but I'd rather use Brave...

[iforce2d]

Just a +1 for the same issue ShardPhoenix is having, but on Linux.
[Version 1.60.110 Chromium: 119.0.6045.105 (Official Build) (64-bit)]

In other issues here on Github (eg. #30181) I have seen a screenshot posted by @ShivanKaul showing an option for allowing sites to use localhost resources, but I can't find that anywhere... was it removed?

[ShivanKaul]

It's only enabled in Nightly for now, not in Release channel. Based on the feedback we got, it didn't look like V1 was fulfilling everyone's needs. Once we have V2 we'll expand the feature to other channels.

[iforce2d]

Ok, thanks for the quick reply.
btw not sure if it matters, but I was able to get around this and connect to a websocket on localhost by choosing "Allow all trackers and ads" in the 'Advanced controls' section of the popup next to the address bar. From reading around other discussions here I got the feeling that shouldn't have worked, and that no localhost access would be possible without an explicit authorization... just wondering if that is the intended behavior.