>That presents an entirely new threat model for which we don’t have a solution. What attack do you think doesn't have a solution? CSRF attacks? The solution is

>That presents an entirely new threat model for which we don’t have a solution. What attack do you think doesn't have a solution? CSRF attacks? The solution is CSRF tokens, or checking the Origin header, same as how non-local-network sites protect against CSRF. DNS rebinding attacks? The solution is checking the Host header.