I'm pretty behind on everything, but how did I not hear that every major browser let javascript connect to 0.0.0.0, even the ones that tried to block access to localhost and localnets?
I mean, I have code for my own little thing that gets this right. I read an RFC while implementing it of course. Thought that 0.0.0.0 was common knowledge anyway.