[whatwg/fetch] Skip localhost when evaluating HSTS upgrades (PR #1781)

<!--
Thank you for contributing to the Fetch Standard! Please describe the change you are making and complete the checklist below if your change is not editorial.

When you submit this PR, and each time you edit this comment (including checking a checkbox through the UI!), PR Preview will run and update it. As such make any edits in one go and only after PR Preview has run.

If you think your PR is ready to land, please double-check that the build is passing and the checklist is complete before pinging.
-->
Fixes #1780 
- [ ] At least two implementers are interested (and none opposed):
   * Firefox (already shipped)
   * [Chrome](https://groups.google.com/a/chromium.org/g/blink-dev/c/WJnjKYY2iSs/m/Rh9HlI3lAwAJ?utm_medium=email&utm_source=footer)
- [ ] [Tests](https://github.com/web-platform-tests/wpt) are written and can be reviewed and commented upon at:
   * HSTS is not presently tested via WPT
- [ ] [Implementation bugs](https://github.com/whatwg/meta/blob/main/MAINTAINERS.md#handling-pull-requests) are filed:
   * Chromium: https://issues.chromium.org/issues/41251622
   * Gecko: n/a
   * WebKit: https://bugs.webkit.org/show_bug.cgi?id=282054
   * Deno (not for CORS changes): ?
- [ ] [MDN issue](https://github.com/whatwg/meta/blob/main/MAINTAINERS.md#handling-pull-requests) is filed: …
- [ ] The top of this comment includes a [clear commit message](https://github.com/whatwg/meta/blob/main/COMMITTING.md) to use. <!-- If you created this PR from a single commit, Github copied its message. Otherwise, you need to add a commit message yourself. -->

(See [WHATWG Working Mode: Changes](https://whatwg.org/working-mode#changes) for more details.)


<!--
    This comment and the below content is programmatically generated.
    You may add a comma-separated list of anchors you'd like a
    direct link to below (e.g. #idl-serializers, #idl-sequence):

    Don't remove this comment or modify anything below this line.
    If you don't want a preview generated for this pull request,
    just replace the whole of this comment's content by "no preview"
    and remove what's below.
-->
***
<a href="https://whatpr.org/fetch/1781.html" title="Last updated on Oct 24, 2024, 6:38 PM UTC (2bf9599)">Preview</a> | <a href="https://whatpr.org/fetch/1781/761c414...2bf9599.html" title="Last updated on Oct 24, 2024, 6:38 PM UTC (2bf9599)">Diff</a>
You can view, comment on, or merge this pull request online at:

  https://github.com/whatwg/fetch/pull/1781

-- Commit Summary --

  * Add restriction

-- File Changes --

    M fetch.bs (2)

-- Patch Links --

https://github.com/whatwg/fetch/pull/1781.patch
https://github.com/whatwg/fetch/pull/1781.diff

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/1781
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/fetch/pull/1781@github.com>