https://github.com/garywill/LAN-port-scan-forbidder Skip to content Sign up * Why GitHub? + Features + Mobile + Actions + Codespaces + Packages + Security + Code review + Issues + Integrations + GitHub Sponsors + Customer stories * Team * Enterprise * Explore + Explore GitHub + Learn and contribute + Topics + Collections + Trending + Learning Lab + Open source guides + Connect with others + The ReadME Project + Events + Community forum + GitHub Education + GitHub Stars program * Marketplace * Pricing + Plans + Compare plans + Contact Sales + Education [ ] * # In this repository All GitHub | Jump to | * No suggested jump to results * # In this repository All GitHub | Jump to | * # In this user All GitHub | Jump to | * # In this repository All GitHub | Jump to | Sign in Sign up {{ message }} garywill / LAN-port-scan-forbidder Public * Notifications * Fork 0 * Star 25 * Forbid untrusted webs to access localhost or LAN. An anti-scan protection [?] garywill.github.io GPL-2.0 License 25 stars 0 forks Star Notifications * Code * Issues 2 * Pull requests 0 * Actions * Projects 0 * Wiki * Security * Insights More * Code * Issues * Pull requests * Actions * Projects * Wiki * Security * Insights master Switch branches/tags [ ] Branches Tags Could not load branches Nothing to show {{ refName }} default View all branches Could not load tags Nothing to show {{ refName }} default View all tags 1 branch 0 tags Code Latest commit @garywill garywill small format fix ... 377a210 Jan 15, 2022 small format fix 377a210 Git stats * 15 commits Files Permalink Failed to load latest commit information. Type Name Latest commit message Commit time LICENSE license GPL 2 Aug 13, 2021 README.md update readme Jan 15, 2022 background.html port for Chrome Jan 3, 2022 background.js small format fix Jan 15, 2022 browser-polyfill.min.js port for Chrome Jan 3, 2022 common.js port for Chrome Jan 3, 2022 icon.png first release Aug 13, 2021 icon.svg first release Aug 13, 2021 icon_gray.png png icon Jan 3, 2022 icon_gray.svg png icon Jan 3, 2022 ipaddr.js readme Aug 13, 2021 manifest-chrome.json 0.5.0 Jan 15, 2022 manifest.json 0.5.0 Jan 15, 2022 menu.js add keyboard shortcut support Jan 15, 2022 off_handler.js small format fix Jan 15, 2022 View code LAN port scan forbidder What So Fallback operation Cases when web LAN scan is properly used README.md LAN port scan forbidder Forbid untrusted web to scan localhost or LAN. Browser addon. * Firefox Addon * Chrome Addon What Webs can try to fetch 127.0.0.1:xxxx or 192.168.Y.Z:xxxx to scan your open ports in LAN. Although browsers have cross-domain protections, webs can't read response contents, but can still see the connection succeeds or fails. There're already reports that some websites using that as tracking fingerprint. A web for testing: http://samy.pl/webscan/ So Forbid any website behaviors trying to connect to your LAN or localhost, if user is visiting the website via their domains or public IP addresses. (Read the source code background.js to see the logic) Using JS library whitequark/ipaddr.js (MIT License) v2.0.0 to judge IP range. Fallback operation If user find a web broken, user can temporary set this addon disabled via toolbar button for: * this one tab * this one tab and new tabs opened by this tab * this one window (Firefox only) * globally (above can be set as keyboard shortcuts) there's showy toolbar button badge indicating disabling status. Cases when web LAN scan is properly used Not all LAN-port-scan are evil. * Some manufacturers provide web for user's browser to scan LAN for their product that need updating. * Some softwares use 127.0.0.1 communication to interact between native program and web. About Forbid untrusted webs to access localhost or LAN. An anti-scan protection [?] garywill.github.io Topics firefox security privacy browser firefox-addon webextension firefox-extension browser-extension lan-port-scanner Resources Readme License GPL-2.0 License Stars 25 stars Watchers 2 watching Forks 0 forks Releases No releases published Packages 0 No packages published Languages * JavaScript 99.3% * HTML 0.7% * (c) 2022 GitHub, Inc. * Terms * Privacy * Security * Status * Docs * Contact GitHub * Pricing * API * Training * Blog * About You can't perform that action at this time. You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session.