Ausnahme gefangen: SSL certificate problem: certificate is not yet valid ๐Ÿ“Œ New in Chrome 103

๐Ÿ  Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeitrรคge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden รœberblick รผber die wichtigsten Aspekte der IT-Sicherheit in einer sich stรคndig verรคndernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch รผbersetzen, erst Englisch auswรคhlen dann wieder Deutsch!

Google Android Playstore Download Button fรผr Team IT Security



๐Ÿ“š New in Chrome 103


๐Ÿ’ก Newskategorie: Programmierung
๐Ÿ”— Quelle: developer.chrome.com

Here's what you need to know:

  • There's a new HTTP 103 status code that helps the browser decide what content to preload before the page has even started to arrive.
  • The Local Font Access API gives web applications the ability to enumerate and use fonts installed on the user's computer.
  • AbortSignal.timeout() is an easier way to implement timeouts on asynchronous APIs.
  • And there's plenty more.

I'm Pete LePage. Let's dive in and see what's new for developers in Chrome 103.

HTTP 103 status code 103 - early hints

One way you can improve page performance is to use resource hints. They give the browser "hints" about what stuff it might need later. For example, preloading files, or connecting to a different server.

<link as="font" crossorigin="anonymous"
href="..." rel="preload">

<link as="font" crossorigin="anonymous"
href="..." rel="preload">

<link href="https://web-dev.imgix.net"
rel="preconnect">

But the browser can't act on those hints until the server sends at least part of the page.

Imagine the browser requests a page, but the server requires a few hundred milliseconds to generate it. Until the browser starts to receive the page, it just sits there and waits. But, if the server knows the page will always need a certain set of subresources, for example, a CSS file, some JavaScript, and a few images, it can immediately respond with the new HTTP 103 Early Hints status code, and ask the browser to preload those subresources.

Then, once the server has generated the page, it can send it with the normal HTTP 200 response. As the page comes in, the browser has already started loading the required resources.

Since this is a new HTTP status code, using it requires updates to your server.

Get started with HTTP 103 Early hints:

Local Font Access API

Fonts on the web have always been a challenge, and especially so for apps that let users create their own graphics and designs. Until now, web apps could only really use web fonts. There was no way to get a list of fonts the user had installed on their computer. And, there was no way to access the full font table data, critical if you need to implement your own custom text stack.

The new Local Font Access API gives web applications the ability to enumerate the local fonts on the user's device, and provides access to the font table data.

To get a list of fonts installed on the device, you'll first need to request permission.

// Ask for permission to use the API
try {
const status = await navigator.permissions.request({
name: 'local-fonts',
});
if (status.state !== 'granted') {
throw new Error('No Permission.');
}
} catch (err) {
if (err.name !== 'TypeError') {
throw err;
}
}

Then, call window.queryLocalFonts(). It returns an array of all the fonts installed on the users device.

const opts = {};
const pickedFonts = await self.queryLocalFonts();
for (const fontData of pickedFonts) {
console.log(fontData.postscriptName);
console.log(fontData.fullName);
console.log(fontData.family);
console.log(fontData.style);
}

If you're only interested in a subset of fonts, you can filter them by adding a postscriptNames parameter.

const opts = {
postscriptNames: [
'Verdana',
'Verdana-Bold',
'Verdana-Italic',
],
};
const pickedFonts = await self.queryLocalFonts(opts);

Check out Tom's article Use advanced typography with local fonts on web.dev for complete details.

Easier Timeouts with AbortSignal.timeout()

In JavaScript, AbortController and AbortSignal are used to cancel an asynchronous call.

For example, when making a fetch() request, you can create an AbortSignal, and pass it to fetch(). If you want to cancel the fetch() before it returns, call abort() on the instance of the AbortSignal. Up until now, if you wanted it to abort after a specific amount of time, you'd need to wrap it in a setTimeout().

const controller = new AbortController();
const signal = controller.signal;
const resp = fetch(url, { signal });

setTimeout(() => {
// abort the fetch after 6 seconds
controller.abort();
}, 6000);

Thankfully, that just got easier with a new timeout() static method on AbortSignal. It returns an AbortSignal object that is automatically aborted after the given number of milliseconds. What used to be a handful of lines of code, is now just one.

const signal = AbortSignal.timeout(6000);
const resp = fetch(url, { signal });

AbortSignal.timeout() is supported in Chrome 103, and is already in Firefox, and Safari.

And more!

Of course there's plenty more.

  • The avif image file format is now sharable by Web Share
  • Chromium now matches Firefox by firing popstate immediately after URL changes. The order of events is now: popstate then hashchange on both platforms.
  • And Element.isVisible() tells you whether an element is visible or not.

Further reading

This covers only some of the key highlights. Check the links below for additional changes in Chrome 103.

Subscribe

To stay up to date, subscribe to the Chrome Developers YouTube channel, and you'll get an email notification whenever we launch a new video.

I'm Pete LePage, and as soon as Chrome 104 is released, I'll be right here to tell you what's new in Chrome!

...



๐Ÿ“Œ New in Chrome 103: HTTP 103 early hints, Local Font Access, AbortSignal.timeout, and more!


๐Ÿ“ˆ 37.28 Punkte

๐Ÿ“Œ ClamAV Antivirus 0.103.0/0.103.1 PDF Parser buffer overflow


๐Ÿ“ˆ 30.01 Punkte

๐Ÿ“Œ ClamAV Antivirus 0.103.0/0.103.1 Excel XLM Macro Parsing Module denial of service


๐Ÿ“ˆ 30.01 Punkte

๐Ÿ“Œ CVE-2015-2544 | Microsoft Exchange Server 2013 CU8/2013 CU9 Outlook Web Access cross site scripting (MS15-103 / MS15-103)


๐Ÿ“ˆ 30.01 Punkte

๐Ÿ“Œ CVE-2015-2543 | Microsoft Exchange Server 2013 CU8/2013 CU9 Outlook Web Access cross site scripting (MS15-103 / MS15-103)


๐Ÿ“ˆ 30.01 Punkte

๐Ÿ“Œ CVE-2015-2505 | Microsoft Exchange Server 2013 CU8/2013 CU9 Outlook Web Access information disclosure (MS15-103 / MS15-103)


๐Ÿ“ˆ 30.01 Punkte

๐Ÿ“Œ CVE-2022-2296 | Google Chrome prior 103.0.5060.114 Chrome OS Shell use after free


๐Ÿ“ˆ 23.7 Punkte

๐Ÿ“Œ Actions on Google, Android P Developer Preview, New in Chrome 65 & More! - TL;DR 103


๐Ÿ“ˆ 22.28 Punkte

๐Ÿ“Œ Actions on Google, Android P Developer Preview, New in Chrome 65 & More! - TL;DR 103


๐Ÿ“ˆ 22.28 Punkte

๐Ÿ“Œ Chrome 103 - Whatโ€™s New in DevTools


๐Ÿ“ˆ 22.28 Punkte

๐Ÿ“Œ New in Chrome 103


๐Ÿ“ˆ 22.28 Punkte

๐Ÿ“Œ What's New In DevTools (Chrome 103)


๐Ÿ“ˆ 22.28 Punkte

๐Ÿ“Œ New Chrome OS 103 update will satisfy Chromebook-Android users' Apple envy


๐Ÿ“ˆ 22.28 Punkte

๐Ÿ“Œ Google Chrome 73.0.3683.103 Released for Linux, Windows, and Mac


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ Google Chrome 73.0.3683.103 V8 JavaScript Engine Denial Of Service


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ #0daytoday #Google #Chrome 73.0.3683.103 - WasmMemoryObject::Grow Use-After-Free Exploit #GoogleChr [#0day #Exploit]


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ [dos] Google Chrome 73.0.3683.103 - 'WasmMemoryObject::Grow' Use-After-Free


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ Chrome 103 Beta: Early Navigation Hints, a Host of Completed Origin Trials, and More


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ Deprecations and removals in Chrome 103


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ Google gibt Chrome 103 frei: Lรผcken geschlossen


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ CVE-2022-2161 | Google Chrome prior 103.0.5060.53 WebApp Provider use after free


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ CVE-2022-2160 | Google Chrome prior 103.0.5060.53 protection mechanism


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ CVE-2022-2158 | Google Chrome prior 103.0.5060.53 V8 type confusion


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ Google Chrome Version 103 wird verteilt: Das ist neu


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ Google Chrome 103 ist da! Neue Version des Browsers bringt schnelle Ladezeiten, intelligente Overlays & mehr


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ Google Patches 14 Vulnerabilities With Release of Chrome 103


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ Google Chrome OS 103 ist da: GrรถรŸeres Update bringt verbesserten Phone Hub, neuen Launcher & mehr


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ CVE-2022-2157 | Google Chrome prior 103.0.5060.53 Interest Groups use after free


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ CVE-2022-2156 | Google Chrome prior 103.0.5060.53 Base use after free


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ CVE-2022-2165 | Google Chrome prior 103.0.5060.53 URL Format Remote Code Execution


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ CVE-2022-2164 | Google Chrome prior 103.0.5060.53 Extensions API Privilege Escalation


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ CVE-2022-2163 | Google Chrome prior 103.0.5060.53 Cast UI/Toolbar use after free


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ CVE-2022-2162 | Google Chrome prior 103.0.5060.53 File System API protection mechanism


๐Ÿ“ˆ 19.35 Punkte

๐Ÿ“Œ Chrome OS 103: Neue Android-Verzahnungen ziehen in den Phone Hub ein


๐Ÿ“ˆ 19.35 Punkte











matomo