Chrome 93: Multi-Screen Window Placement, PWAs as URL Handlers, and More
Unless otherwise noted, changes described below apply to the newest Chrome beta channel release for Android, Android WebView, Chrome OS, Linux, macOS, and Windows. Learn more about the features listed here through the provided links or from the list on ChromeStatus.com. Chrome 93 is beta as of July 29, 2021.
This version of Chrome introduces the origin trials described below. Origin trials allow you to try new features and give feedback on usability, practicality, and effectiveness to the web standards community. To register for any of the origin trials currently supported in Chrome, including the ones described below, visit the Chrome Origin Trials dashboard. To learn more about origin trials in Chrome, visit the Origin Trials Guide for Web Developers. Microsoft Edge runs its own origin trials separate from Chrome. To learn more, see the Microsoft Edge Origin Trials Developer Console.
Cross-origin no-CORS requests can now be made to omit credentials (cookies, client certificates, etc.) using the Sites that wish to continue using The Multi-Screen Window Placement API allows you to place windows on any display connected to your machine, store that placement, and make a window full-screen on any display. With this API, a presentation app can show slides on one screen and speaker notes on another. An art or music creation app can place palettes on a second screen. And a restaurant can show a touchscreen menu on a kiosk and a separate window for employees. Incorporating developer feedback from the first origin trial, the API enters a second origin trial with an improved shape and ergonomics.
Window controls overlay extends an app's client area to cover the entire window, including the title bar, and the window control buttons (close, maximize/restore, minimize). The web app developer is responsible for drawing and input-handling for the entire window except for the window controls overlay. Developers can use this feature to make their installed desktop web apps look like O.S. apps. For more information, see Customize the window controls overlay of your PWA's title bar.
PWA as URL Handlers allows apps like The following features, previously in a Chrome origin trial, are now enabled by default.
Web Bundles provides a new approach to load a large number of resources efficiently using a format that allows multiple resources to be bundled. This feature addresses issues with previous approaches to resource bundling.
The output of some JavaScript bundlers does not interact well with the HTTP cache and configuring them can sometimes be difficult. Even with bundled JavaScript, execution needs to wait for all bytes to download. Ideally loading multiple subresources should use streaming and parallelization, which is not possible with one JavaScript file. For JavaScript modules, execution still needs to wait for an entire resource tree to download because of deterministic execution.
WebXR applications can now retrieve data about planes present in a user's environment, which enables augmented reality applications to create more immersive experiences. Without this feature, developers would have to resort to running their own computer vision algorithms on data from Web developers have found aborted The flexbox and flex items now obey positional alignment keywords. Flexbox previously only obeyed Without these additional keywords, developers need to change the keyword values whenever they change the writing mode, text direction, or flex reversal properties ( The The meta element's "media" attribute will be honored for The HTMLMediaElement.controlsList property now supports The CSS user preference media feature This version of Chrome adds four new features and changes to the User-Agent client hints API.
Low-entropy hints are those that don't give away too much information, or give information that would be too easy to discover in other ways to realistically hide. In the context of client hints, this means that these hints are available in every request, whether or not the origin involved requested it or whether the frame involved is a first or third party context.
The WebOTP API will now be supported on desktop when both Chrome on Desktop and Android Chrome are logged in using the same Google account. The WebOPT API provides the ability to programmatically read a one-time code from specially-formatted SMS messages addressed to their origin, reducing user friction during sign-on. Previously, this was only available on mobile devices where SMS was supported.
This version of Chrome incorporates version 9.3 of the V8 JavaScript engine. It specifically includes the changes listed below. You can find a complete list of recent features in the V8 release notes. This version of Chrome introduces the deprecations and removals listed below. Visit ChromeStatus.com for lists of current deprecations and previous removals. Connections to HTTP, HTTPS or FTP servers on ports 989 and 990 now fail. These ports are used by the FTPS protocol, which has never been implemented in Chrome. However, FTPS servers can be attacked in a cross-protocol attack by malicious web pages using carefully-crafted HTTPS requests. This is a mitigation for the ALPACA attack. Chrome has now removed support for the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher suite. TLS_RSA_WITH_3DES_EDE_CBC_SHA is a remnant of the SSL 2.0 and SSL 3.0 era. 3DES in transport layer security (TLS) is vulnerable to the Sweet32 attack. Being a CBC cipher suite, it is also vulnerable to the Lucky Thirteen attack. The first replacement AES cipher suites were defined for TLS in RFC3268, published around 19 years ago, and there have been several iterations since. WebAssembly module sharing between cross-origin but same-site environments will be deprecated to allow agent clusters to be scoped to origins long term. This follows a WebAssembly specification change, which has an impact on the platform as well.Origin Trials
New Origin Trials
Cross-Origin-Embedder-Policy: credentialless
credentialless keyword. Similarly to
COEP: require-corp, it can enable cross-origin isolation.
SharedArrayBuffer must opt-in to cross-origin isolation. Today,
COEP: require-corp exists, and is used to enable cross-origin isolation. It is functional and solid, but turns out to be difficult to deploy at scale, as it requires all subresources to explicitly opt-in. This is fine for some sites, but creates dependency problems for sites that gather content from users (Google Earth, social media generally, forums, etc.).
Multi-Screen Window Placement
Window Controls Overlay for Installed Desktop Web Apps
PWAs as URL Handlers
music.example.com to register themselves as URL handlers for URLs that match patterns like
https://music.example.com,
https://*.music.example.com, or
https://🎵.example.com, so that links from outside of the PWA, for example, from an instant messenger application or an email client, open in the installed PWA rather than in a browser tab.
Completed Origin Trials
Subresource loading with Web Bundles
WebXR Plane Detection API
getUserMedia() (available on
navigator and
MediaDevices) in order to detect planes present in the users' environment. Such solutions have thus far been unable to match the quality and accuracy of native augmented reality capabilities or support world scale.
Other features in this release
AbortSignal.abort() Static Method
AbortSignal.abort() is a static method that allows creating a new
AbortSignal object that is already aborted. It is similar in spirit to
Promise.reject(), and provides improved developer ergonomics.
AbortSignal objects to be useful for a variety of purposes. They signify to JavaScript APIs that no work should be done. Currently, creating an already-aborted
AbortSignal object requires multiple lines of code.
AbortSignal.abort() requires one:
return AbortSignal.abort();
CSS Flexbox: Support Alignment Keywords start, end, self-start, self-end, left, right
center,
flex-start, and
flex-end. The additional alignment keywords (
start,
end,
self-start,
self-end,
left,
right) allow authors to more easily align the flex items in the face of varying writing modes and flex flows.
flex-direction: row-reverse,
flex-direction:column-reverse or
align-content: wrap-reverse). The keywords implemented here let them set alignment once.
Error.cause Property
Error() constructor supports a new options property called cause, which will be assigned to the error as a property. This allows errors to be chained without unnecessary and overelaborate formalities on wrapping the errors in conditions.
Honor Media HTML Attribute for meta name=theme-color
meta[name="theme-color"] so that web developers can adjust the theme color of their site based on a media query (dark and light modes for instance). The first one that matches will be picked.
noplaybackrate in HTMLMediaElement.controlsList
noplaybackrate, which allows websites to enabled or disable the playback speed control exposed by the browser. With browser vendors adding playback speed control to their media controls, developers should have a way to control the visibility of this new control. Try the new property on the
noplaybackrate in
HTMLMediaElement.controlsList Sample.
Sec-CH-Prefers-Color-Scheme Client Hint Header
prefers-color-scheme has a potentially significant impact on the amount of CSS that needs to be delivered by a page and on the experience the user is going to have when the page loads. The new
Sec-CH-Prefers-Color-Scheme client hint header allows sites to obtain the user's preference optionally at request time, allowing servers to inline the right CSS and therefore avoid a flash of incorrect color theme.
User-Agent Client Hints API Updates
Sec-CH-UA-Platform is a request header that gives a server information about the platform on which a given user agent is executing.
WebOTP API: Cross-Device Support
JavaScript
Object.hasOwn
Object.hasOwn
, a new boolean property, provides an easier-to-use, static method version of Object.prototype.hasOwnProperty
. Deprecations, and Removals
Block ports 989 and 990
Remove 3DES in TLS
WebAssembly Cross-Origin Module Sharing