By default, access to
localhost are disallowed in Microsoft Edge. One way to workaround this is to enable it in the
On that label it also says
(this might put your device at risk).
What risks am I exposing myself to by allowing localhost loopback?
I'm thinking that XSS wouldn't be a risk due to Same Origin Policy (unless I'm XSS-ing a site running on my own local web server, but in that case the attacker already has local control of my device).