MONSTER PHONICS Change of content delivery Chrome error

[Koldov]

Not sure where to put this...

 

I have had to previously make an exception in our filtering to allow Vimeo embeds in Monster Phonics and this worked well.

 

However, I have just been told content appears to be blocked again.

 

I have checked the report from the users IP and the only thing blocked is  ht tps : // static- bundles. visme. co/ visme-embed.js

 

This appears to be content embedded in an iFrame which is a change in how Monster Phonics delivers their content, which I was unaware of.

 

I allowed that through the filtering and now have another issue with Chrome I believe. 

 

"The connection was blocked because it was initiated by a public page to connect to devices or servers on your local network"

 

From what I gather, this might relate to a setting in our Chrome GPO "Google/Google Chrome/Local Network Access settings" which is set as "Block "sites from making requests to local network endpoints"

 

I'm not sure as this Reddit post says:

"our users get an error that says, "The connection is blocked because it was initiated by a public page to connect to devices or servers on your private network. Reload this page to allow the connection.", which seems normal with the change they made in the update.

The issue that solves this is disabling Local Network Access Checks in chrome://flags. However, that isn't a solution for us. I've added the windows.admx & chrome.admx, and went the route of using an Administrative Template with ADMX files, in Intune, but that still does not solve the issue, no matter which of the four settings I set in Local Network Access settings, we still get the same error.

Chrome ADMX Local Network Access settings:

Block sites from making requests to local network endpoints.

Specifies whether to apply restrictions to requests to local network endpoints

Allow sites to make requests to local network endpoints.

Specifies whether to (temporarily) opt out of Local Network Access restrictions

We've tried using the Intune Config policy to allow Local Network Access to all domains (straight wildcard), and the issue persists. Has anyone encountered anything like this with Chrome's new update? If so, have you found a fix?"

 

But from similar internet searches "CORS:localnetworkaccessdenied. The only solution I have found is to disable local network access check flag in chrome"

 

and

 

"Embedded views unexpectedly fail to load after updating Google Chrome to version 142. Embedded views may unexpectedly display the following error:

The connection is blocked because it was initiated by a public page to connect to devices or servers on your private network. Reload this page to allow the connection.

 

Cause

New network security restrictions were introduced in Google Chrome version 142. These restrictions, specifically the 'Local Network Access Checks,' block requests from public pages to private networks, which impacts the rendering of embedded Tableau dashboards.

Resolution

Resolution Options

1. Update the Chrome flag settings to allow local network access. Refer to the Knowledge Base article for detailed steps: Configure Chrome to Suppress the Local Network Access Prompt 

 

This was set to avoid the Network Access pop-ups I believe.

 

Anyone had similar or know if I'm right?

Edited May 1 by Koldov