(Chrome/Edge) Local Network Access Blocked by PNA Policy
This document is a machine-translated draft and is currently undergoing review. Some content may be inaccurate or differ from the original Korean version. For the most precise information, refer to the Korean documentation.
Overview
In Chrome and Edge version 141 and later, the PNA (Private Network Access) policy has been strengthened. Web applications that attempt to access private network (internal network) resources from a public domain (internet) must pass the browser's preflight request and permission checks.
Since Kollus Player uses a structure that communicates with local network devices, the following issues may occur in browser environments where this policy is enforced, when calling the player or using the full-screen feature:
- A browser permission request popup is displayed, and if blocked, the player will not function
- The player fails to load entirely, or CORS/PNA errors occur
- When calling the player inside an
iframe, requests to internal network resources are blocked
Resolution
Method 1: allow the browser permission popup (general users)
When the browser displays a popup requesting local network access permission, you must click [Allow]. Once allowed, no additional popups will appear for the same site, and the permission is saved per site.
- Chrome/Edge 145 and later: The permission request item is displayed as 'Apps on your device'. Click [Allow] and then refresh the page.
- Chrome/Edge 141 and later (below 145): The permission request item is displayed as 'Local network access'. Click [Allow] and then refresh the page.
- Enter the address below in the browser address bar and press [Enter].
- Chrome:
chrome://settings/content/localNetwork - Edge:
edge://settings/content/localNetwork
- Chrome:
- Find the relevant site in the blocked list and change it to [Allow].
- Refresh the page.
Method 2: change browser flag settings (advanced users)
Disabling the PNA policy check allows access to the local network without a permission popup.
This method modifies internal browser experimental features (flags), and the settings may be reset upon browser updates. Use this only on personal PC environments, and consult your IT administrator in corporate environments with security policies.
Chrome 141 and later settings
- Enter
chrome://flags/#local-network-access-checkin the Chrome address bar and press [Enter]. - Find the Local Network Access Checks item and select [Disabled] from the dropdown.
- Click the [Relaunch] button at the bottom of the page to restart the browser.
Edge 142 and later settings
The PNA policy is disabled by default in Edge up to version 141, but is scheduled to be enabled by default starting from Edge 142.
- Enter
edge://flags/#local-network-access-checkin the Edge address bar and press [Enter]. - Find the Local Network Access Checks item and select [Disabled] from the dropdown.
- Click the [Relaunch] button at the bottom of the page to restart the browser.
Method 3: configure iframe attributes (developers)
This guide is for developers who embed Kollus Player directly via iframe to build their service.
For iframe elements that request private network resources from a public domain, the allow attribute must explicitly include the local-network-access and loopback-network permissions.
Without these attributes, internal network resource requests will be blocked in Chrome/Edge 141 and later.
<iframe src="https://v.kr.kollus.com/s?jwt=..."
allow="encrypted-media; local-network-access; loopback-network"
allowfullscreen
webkitallowfullscreen
mozallowfullscreen>
</iframe>
The role of each attribute is as follows:
| Attribute | Description |
|---|---|
local-network-access | Allows the iframe to access private network (internal network) resources in Chrome/Edge |
loopback-network | Allows access to loopback (localhost) network |
encrypted-media | Allows playback of DRM and protected content |
| Allows full-screen functionality |