This is absolutely not true. As I wrote to a different reply. For about 5 years it is possible to call localhost from https page without any warning. Localhost

This is absolutely not true. As I wrote to a different reply. For about 5 years it is possible to call localhost from https page without any warning. Localhost is a secure context, exactly that you don't need to do this. I cannot find the docs that says that, but... it is true. You can try that yourself. W3C has it here https://w3c.github.io/webappsec-secure-contexts/#localhost https://w3c.github.io/webappsec-secure-contexts/#localhost you can see in Chrome source code let's say here https://source.chromium.org/chromium/chromium/src/+/main:third_party/blink/web_tests/http/tests/security/secureContexts/localhost.html?q=localhost&ss=chromium https://source.chromium.org/chromium/chromium/src/+/main:thi...