With WebRTC local ip discovery [1] it can be easily extended to work against a whole local subnet. Looks very dangerous. Probably best to attack this on the DN

With WebRTC local ip discovery [1] it can be easily extended to work against a whole local subnet. Looks very dangerous. Probably best to attack this on the DNS rebind level. Encapsulating the browser network context somehow and firewalling this might help mitigating this attack too. [1] https://www.browserleaks.com/webrtc https://www.browserleaks.com/webrtc