It works in secure contexts. internal domains with .localhost name are considered secure. https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts

It works in secure contexts. internal domains with .localhost name are considered secure. https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts https://developer.mozilla.org/en-US/docs/Web/Security/Secure... Locally-delivered resources such as those with http://127.0.0.1 http://127.0.0.1 URLs, http://localhost http://localhost and http://*.localhost http://*.localhost URLs (e.g. http://dev.whatever.localhost/ http://dev.whatever.localhost/), and file:// URLs are also considered to have been delivered securely.