Feedback wanted: CORS for private networks (RFC1918)
DRANK
Unintentional exposure of devices and servers on a client’s internal network to the web at large makes them vulnerable to malicious attacks. CORS-RFC1918 is a proposal to block requests from public networks by default on the browser and require internal devices to opt-in to such requests.