\n","Subresource Loading with Web Bundles","Subresource loading with web bundles is a way to load many resources efficiently. To use the feature a web page declares that certain resources are provided by a web bundle at a particular URL. For example:","\n","For information on creating web bundles, see Get started with Web Bundles. For more information on subresource loading using web bundles, see Origin Trial for Subresource Loading with Web Bundles.","Cookie Expires/Max-Age Attribute Upper Limit","When cookies are set with an explicit Expires/Max-Age attribute the value will now be capped to no more than 400 days. Previously, there was no limit and cookies could expire as much as multiple millennia in the future. This follows a change in the spec.
\n
\n400 days was chosen as a round number close to 13 months. This duration ensures that sites visited roughly once a year (for example, sites for choosing health insurance benefits) will continue to work.","CSS object-view-box","object-view-box"," property"," allows authors to specify a portion of an image that should draw within the content box of a target replaced element. This enables creation of images with a custom glow or shadow applied, with proper ","ink-overflow"," behavior such as a CSS shadow would have. For more information, see ","First Look At The CSS object-view-box Property","Fullscreen Capability Delegation"," allows a Window to transfer the ability to call ","requestFullscreen()"," to another Window it trusts after relinquishing the transient user activation at the sender Window. This feature is based on the ","general delegation mechanism"," that shipped in Chrome 100.","Multi-Screen Window Placement: Fullscreen Companion Window","Fullscreen Companion Window allows sites to place fullscreen content and a popup window on separate screens from a single user activation. There is a demo available with source code on GitHub.","Permissions Policy for Web Bluetooth API","Web Bluetooth is ","now controllable with a Permissions Policy",". The token is named ","\"bluetooth\""," and has a default allowlist of ","'self'","visual-box on overflow-clip-margin","overflow-clip-margin"," specifies how far an element's content is allowed to paint before being clipped. This feature allows using ","visual-box"," values to configure the reference box that defines the overflow clip edge the content is clipped to. ","Web Custom Formats for Async Clipboard API","Web Custom Formats lets websites read and write arbitrary unsanitized payloads using a standardized web custom format, as well as read and write a limited subset of OS-specific formats (for supporting legacy apps).
\n
\nThe name of the clipboard format is mangled by the browser in a standardized way to indicate that the content is from the web. This allows platform applications to opt-in to accepting the unsanitized content.","Some web app developers want to exchange data payloads between web and platform applications via operating system clipboards. The ","Clipboard API"," supports the most popular standardized data types (text, image, rich text) across all platforms. However, this API does not scale to the long tail of specialized formats. In particular, custom formats, non-web-standard formats like TIFF (a large image format), and proprietary formats like ","docx"," (a document format), are not supported by the current Web Platform.","WebGL Canvas Color Management","As per the spec, Chromium's implementation of WebGL now allows specifying:","The color space of a drawing buffer.","The color space that content should be converted to when importing as a texture.","Before this version of Chrome, both of these defaulted to sRGB. Now they can also use \"display-p3\".","This version of Chrome introduces the deprecations and removals listed below. Visit ChromeStatus.com for lists of current deprecations and previous removals.","Block Third-Party Contexts Navigating to Filesystem URLs","iframes can no longer navigate to filesystem URLs. Top frame support for navigating to filesystem URLs was dropped in Chrome 68.","Remove Non-Standard Client Hint Mode","Four client hints (","dpr","width","viewport-width","device-memory",") have a default allowlist of ","self"," but behave as though they have a default allowlist of ","*"," on Android, contrary to the spec. ","This is now fixed",", increasing privacy on Android by requiring explicit delegation of these hints.","Remove U2F API (Cryptotoken)","Chrome's legacy U2F API for interacting with security keys is no longer supported. U2F security keys themselves are not deprecated and will continue to work.","Affected sites should migrate to the Web Authentication API. Credentials that were originally registered via the U2F API can be challenged via web authentication. USB security keys that are supported by the U2F API are also supported by the Web Authentication API.","U2F is Chrome's original security key API. It allows sites to register public key credentials on USB security keys and challenge them for building phishing-resistant two-factor authentication systems. U2F never became an open web standard and was subsumed by the Web Authentication API (launched in Chrome 67). Chrome never directly supported the FIDO U2F JavaScript API, but rather shipped a component extension called cryptotoken, which exposes an equivalent ","chrome.runtime.sendMessage()"," method. U2F and Cryptotoken are firmly in maintenance mode and have encouraged sites to migrate to the Web Authentication API for the last two years.","\nChrome 103 Beta: Early Navigation Hints, a Host of Completed Origin Trials, and More\n","\nThursday, May 26, 2022\n","Unless otherwise noted, changes described below apply to the newest Chrome beta channel release for Android, Chrome OS, Linux, macOS, and Windows. Learn more about the features listed here through the provided links or from the list on ChromeStatus.com. Chrome 103 is beta as of May 26, 2022. You can download the latest on Google.com for desktop or on Google Play Store on Android. ","Early Hints for Navigation","Chrome now supports the ","103 Early Hints HTTP response code"," for navigation. (Note: the correspondence with the Chrome release number is a coincidence.) When a 103 response includes ",""," or other link headers Chromium tries to preload (and/or preconnect, prefetch) specified resources before the final response is received. This gives web developers a way to optimize ","core web vitals"," such as Largest Contentful Paint (LCP)."," 
HTTP/2 introduced the concept of server push, a mechanism that allows a server to preemptively send data to the client. Server push was intended to improve site performance. In the years since, developers have generally preferred preloading from the client side of a web interaction. 103 early hints for navigation provides a new way to do that."," 
For information on the work that went into bringing this to the web, see Beyond Server Push: The 103 Early Hints Status Code.","Origin trials allow you to try new features and give feedback on usability, practicality, and effectiveness to the web standards community. To register for any of the origin trials currently supported in Chrome, including the ones described below, visit the Chrome Origin Trials dashboard. To learn more about origin trials in Chrome, visit the Origin Trials Guide for Web Developers. Microsoft Edge runs its own origin trials separate from Chrome. To learn more, see the Microsoft Edge Origin Trials Developer Console. ","Federated Credentials Management","The Federated Credential Management API allows users to log in to websites with their federated accounts in a privacy preserving manner. It allows the browser to understand the context in which the relying party and identity provider exchange information, inform the user about the information and privilege levels being shared and prevent unintended abuse. For more information, see Participate in a Federated Credential Management API origin trial for IdPs.","Local Font Access","Web applications can now enumerate local fonts and metadata about each. The new API also gives web applications access to table data stored within local fonts, allowing those fonts to be rendered within their applications using custom text stacks.","Note: The Chrome 102 beta post erroneously listed this feature as shipping in that version.","Same-Origin Prerendering Triggered by the Speculation Rules API","Prerendering loads a web page before it is needed, so that when the actual navigation to that page occurs, it can be shown instantly. To speed up page loads. Chrome's previous prerender mechanism is now replaced with No State Prefetch. No State Prefetch doesn't generally result in an instant page load experience, but the new feature does. This feature is supported on Android only.","Update User-Agent Client Hints GREASE Implementation","The implementation of ","GREASE"," in User Agent Client Hints ","is now aligned with the current spec",", which includes additional "," characters beyond the current semicolon and space, and which recommends varying the arbitrary version. This helps prevent bad assumptions from being built on top of User-Agent strings.","AbortSignal.timeout() Static Method","Returns ","a new AbortSignal object"," that is automatically aborted after a given number of milliseconds. Use this method to easily implement timeouts for signal-accepting asynchronous APIs, such as ",". For example:","fetch(url, { signal: AbortSignal.timeout(10_000) });","ARIA Attribute Reflection for the role Attribute","Element","ElementInternal"," interfaces ","now include an ","ARIA"," called ariaRoleDescription which returns or modifies the ARIA role attribute directly. This feature is only supported on desktop.","avif is Now a Permitted Web Share File Extension","The avif image file format is now sharable by Web Share. Adding avif to the other allowed image file types helps spread the use of it. A website might like their users to be able to share pictures and other files through social media, email, chat, etc. The Web Share API is already shipped to more platforms such as ChromeOS and Windows, but avif is not supported yet.","\"deflate-raw\" Compression Format","Chrome supports a new compression format, ","deflate-raw",", to give web developers access to the raw deflate stream without any headers or footers. This is needed, for example, to read and write zip files.","form rel Attribute","'rel'"," attribute has been added to form elements",". This makes it possible to prevent ","window.opener"," from being present on websites navigated to by form elements which have ","rel=noopener",". It also prevents the ","referer"," header from being sent with ","rel=noreferrer","popstate Fires Before Load","Chromium now matches Firefox and by ","firing ","popstate"," immediately after URL changes"," so that the order of events is now "," then ","hashchange"," across both platforms. Before this change, Chromium fired "," asynchronously after a task, and delayed "," until the load event. This means the event order could be either ",", depending on how long a document took to load. ","Restrict Gamepad Usage","The Gampepad API now ","requires a secure context",". Additionally a new feature policy called ","'gamepad'"," has been added with a default allowlist of ","SerialPort forget()"," allows web developers to voluntarily revoke a permission to a serial port that was granted by a user. Some sites may not be interested in retaining long-term permissions to access serial ports. For example, for an educational web application used on a shared computer with many devices, a large number of accumulated user-generated permissions creates a poor user experience.","\nIn addition to user agent mitigations to avoid this problem, such as defaulting to a session scoped permission on the first request or expiring infrequently used permissions, it should be possible for the site itself to clean up user-generated permissions it no longer needs.","This follows the recent additions of a ","forget()"," method for the ","HIDDevice","USBDevice"," interfaces.","Support visual-box on overflow-clip-margin"," CSS property ","now supports ",", which specifies the box edge to use as the overflow clip edge origin. Valid values are ","content-box","padding-box"," (the default), or ","border-box",". The "," property specifies how far an element's content is allowed to paint before being clipped. ","User Activation Required for SPC Credential Enrollment","A user activation requirement has been added for Secure Payment Confirmation credential enrollment in a cross-origin iframe. This is being done to help mitigate a privacy issue.","Block External Protocol in Sandboxed iframe","Sandboxed iframes are not blocked from opening external applications. Currently, developers sandbox untrusted content and block user navigation. Blocking probably should have also included links to external apps or to the Play store. This has now been fixed. ","Sites that need navigation can add the following values to the ","'); //]]>