Extend LNA policy to allow redifining IP ranges classed as LNA

[MarlonT]

Hello,

We have a corporate policy in place which mandates the use of zscaler. This redirects DNS resolution which often resolves to the zscaler internal CGNAT address space. 

This space is classed as LNA which means every website that does a cross origin sub resource request now presents a permission dialog to the user, and if they deny it, the websites break.

Some websites break even if they are allowed, for example rightmove.co.uk -> view property -> map -> streetview

The chromium project recently extended their policy to allow network address ranges to be added to the LNA override policy:

https://issues.chromium.org/issues/467085904

LocalNetworkAccessIpAddressSpaceOverrides

With this we are able to add the zscaler CGNAT range and websites continue to work as they did.

I note Firefox has a similar policy section for LNA

https://firefox-admin-docs.mozilla.org/reference/policies/localnetworkaccess/

This should be extended with the above capabilities. 

[Jon]

Thanks for submitting an idea to the Mozilla Connect community! Your idea is now open to votes (aka kudos) and comments.