New Google Chrome feature blocks attacks against home networks

Google is testing Private Network Access protections in Chrome 123 to stop public websites from navigating a user’s browser to private-network resources (e.g., routers, localhost) unless explicitly allowed via preflight checks, introducing a warning-only phase, a new BLOCKED_BY_PRIVATE_NETWORK_ACCESS_CHECKS error, and safeguards against auto-reload bypasses; the feature targets web-based pivot attacks such as CSRF and SOHO pharming against internal devices.