Fix target ip

Author: ericdallo

src/bridge/utils.ts

@@ -8,16 +8,36 @@
 
 export type Protocol = 'http' | 'https';
 
-/** RFC 1918 + loopback regex — matches private/local network hosts. */
-const LOCAL_NETWORK_RE =
-  /^(192\.168\.|10\.|172\.(1[6-9]|2\d|3[01])\.|127\.|localhost)/i;
+/** RFC 1918 private addresses (192.168.x, 10.x, 172.16-31.x). */
+const PRIVATE_NETWORK_RE =
+  /^(192\.168\.|10\.|172\.(1[6-9]|2\d|3[01])\.)/i;
+
+/** Loopback addresses (127.x, localhost). */
+const LOOPBACK_RE = /^(127\.|localhost)/i;
 
 /**
  * Returns true when `host` targets a private/local network address.
  * Used for protocol defaults and Chrome Local Network Access hints.
  */
 export function isLocalNetworkHost(host: string): boolean {
-  return LOCAL_NETWORK_RE.test(host);
+  return PRIVATE_NETWORK_RE.test(host) || LOOPBACK_RE.test(host);
+}
+
+/**
+ * Chrome LNA `targetAddressSpace` value for a given host.
+ *
+ * The fetch spec defines three address spaces:
+ * - `"local"` — loopback (127.x, localhost)
+ * - `"private"` — RFC 1918 (10.x, 172.16-31.x, 192.168.x)
+ * - `undefined` — public / not applicable
+ *
+ * Chrome validates that the resolved IP matches the declared space;
+ * a mismatch causes the request to fail.
+ */
+export function targetAddressSpace(host: string): string | undefined {
+  if (LOOPBACK_RE.test(host)) return 'local';
+  if (PRIVATE_NETWORK_RE.test(host)) return 'private';
+  return undefined;
 }
 
 /**
@@ -40,17 +60,17 @@ export function resolveBaseUrl(host: string, protocol?: Protocol): string {
 /**
  * Build extra fetch options for Chrome Local Network Access (LNA).
  *
- * When the target URL points to a private/local address, returns
- * `{ targetAddressSpace: "local" }` so Chrome surfaces its LNA
- * permission prompt instead of silently blocking the request.
+ * Sets `targetAddressSpace` to the correct value (`"private"` for
+ * RFC 1918, `"local"` for loopback) so Chrome surfaces its LNA
+ * permission prompt and relaxes mixed-content blocking.
  *
  * @see https://developer.chrome.com/blog/local-network-access
  */
 export function localNetworkFetchOptions(url: string): RequestInit {
   try {
-    const host = new URL(url).hostname;
-    if (isLocalNetworkHost(host)) {
-      return { targetAddressSpace: 'local' } as RequestInit;
+    const space = targetAddressSpace(new URL(url).hostname);
+    if (space) {
+      return { targetAddressSpace: space } as RequestInit;
     }
   } catch {
     // invalid URL — ignore
@@ -65,8 +85,8 @@ export function localNetworkFetchOptions(url: string): RequestInit {
  * `timeoutMs` milliseconds. The AbortError can be caught upstream
  * to show a user-friendly timeout message.
  *
- * Automatically adds `targetAddressSpace: "local"` for private-network
- * URLs to cooperate with Chrome's Local Network Access restrictions.
+ * Automatically sets `targetAddressSpace` for private/loopback URLs
+ * to cooperate with Chrome's Local Network Access restrictions.
  */
 export async function fetchWithTimeout(
   url: string,