I agree this being a privacy and security concern. The user doesn't mean to block Firefox from loading localhost, but to prevent Firefox in private tabs from letting websites communicate or open websockets to localhost. Out of origin communication to...