owners:
- hchao@chromium.org
- cthomp@chromium.org
- chrome-secure-web-and-net@chromium.org

caption: Block sites from making network requests to local network endpoints.

desc: |-
  List of URL patterns. Network requests initiated from websites served by matching origins to local network endpoints are blocked from issuing <ph name="LOCAL_NETWORK_ACCESS">Local Network Access</ph> requests.

  For origins not covered by the patterns specified here, the user's personal configuration will apply.

  For detailed information on valid URL patterns, please see https://chromeenterprise.google/policies/url-patterns/.

  See https://wicg.github.io/local-network-access/ for <ph
  name="LOCAL_NETWORK_ACCESS">Local Network Access</ph> restrictions.

  There are multiple policies listing origins that impact requests to local network endpoints. If an origin is matched by more than one of the following policies, the policies take precedence in the following order:

    - LocalNetworkBlockedForUrls
    - LocalNetworkAllowedForUrls
    - LocalNetworkAccessBlockedForUrls
    - LocalNetworkAccessAllowedForUrls


example_value:
- http://www.example.com:8080
- '[*.]example.edu'
- '*'

supported_on:
- chrome.*:146-
- chrome_os:146-
- android:146-

features:
  dynamic_refresh: true
  per_profile: true

type: list

schema:
  items:
    type: string
  type: array

tags: []
