caption: Allow private network access in the Direct Sockets API on these sites
desc: |-
  The Direct Sockets API allows communication with arbitrary endpoints using TCP and UDP.
  Please see https://github.com/WICG/direct-sockets for details.

  Private network endpoints are those using IP addresses from private IP address space, which is defined in https://wicg.github.io/private-network-access/#ip-address-space-private.

  Setting the policy lets you list the URL patterns that specify which sites are allowed to communicate with private network endpoints in the Direct Sockets API.
  Valid patterns are limited to Isolated Web Apps.

  Leaving the policy unset means <ph name="DEFAULT_DIRECT_SOCKETS_PRIVATE_NETWORK_ACCESS_SETTING_POLICY_NAME">DefaultDirectSocketsPrivateNetworkAccessSetting</ph> applies for all sites, if it's set.

  URL patterns must not conflict with <ph name="DIRECT_SOCKETS_PRIVATE_NETWORK_ACCESS_BLOCKED_FOR_URLS_POLICY_NAME">DirectSocketsPrivateNetworkAccessBlockedForUrls</ph>. Neither policy takes precedence if a URL matches with both.

  For detailed information on valid url patterns, please see https://chromeenterprise.google/policies/url-patterns. <ph name="WILDCARD_VALUE">*</ph> is not an accepted value for this policy.

  Note that this policy only applies if the origin is allowed to use the Direct Sockets API.
  Please consult <ph name="DEFAULT_DIRECT_SOCKETS_SETTING_POLICY_NAME">DefaultDirectSocketsSetting</ph>, <ph name="DIRECT_SOCKETS_ALLOWED_FOR_URLS_POLICY_NAME">DirectSocketsAllowedForUrls</ph> and <ph name="DIRECT_SOCKETS_BLOCKED_FOR_URLS_POLICY_NAME">DirectSocketsBlockedForUrls</ph> for more details.
example_value:
- isolated-app://aerugqztij5biqquuk3mfwpsaibuegaqcitgfchwuosuofdjabzqaaic
features:
  dynamic_refresh: true
  per_profile: true
future_on:
- chrome.*
- chrome_os
owners:
- file://content/browser/direct_sockets/OWNERS
schema:
  items:
    type: string
  type: array
tags: []
type: list
