Preparing for a Three Digit Version Number

This year, Chrome will release version 100, adding a digit to the version number reported in Chrome's user agent string. To help site owners test for the new string, Chrome 96 introduced a runtime flag that causes Chrome to return '100' in its user agent string. This new flag called chrome://flags/#force-major-version-to-100 has been available from Chrome 96 onward. For more information, see . To learn more about origin trials in Chrome, visit the .

New Origin Trial

Region Capture

Region Capture is an is added, letting websites use the last-remembered size of an element (if any), which provides for a better user experience than for elements with content-visibility: auto. Without this feature, web developers have to guess the rendered size of the element; when used with content-visibility: auto, this may lead to elements jumping around.

AudioContext.outputLatency

The new . It allows opting out of color-scheme for single, specific elements. For example, this allows overriding of force darkening. A few examples illustrate its use.

div { color-scheme: light }

This forces the div element out of color-scheme dark.

div { color-scheme: only light }

This keeps the color-scheme for the element light as above, and opts it out of forced darkening by the user agent.

document.adoptedStyleSheets is Now Mutable

In compliance with the spec, . Possible values are 'standard' and 'high'. These queries allow pages to toggle CSS rules or respond using Window.matchMedia().

New window.open() Behavior for Popups, Tabs, and Windows

As per a spec update, this version of Chrome lets you , asking for explicit permission from the target server. A private network request is any request from a public website to a private IP address or localhost, or from a private website (e.g. intranet) to localhost. Sending a preflight request mitigates the risk of cross-site request forgery attacks against private network devices such as routers, which are often not prepared to defend against this threat.

structuredClone() Method on Windows and Workers

Windows and Workers now support the structuredClone() methods for making deep copies of objects. A deep copy is one that copies an object's properties, but invokes itself recursively when it finds a reference to another object, creating a copy of that object as well. This ensures that two pieces of code don't accidentally share an object and unknowingly manipulate each others' state. For an explanation of deep copies and how to use them, see exposes the is enabled for installed desktop web apps, the app's client area is extended to cover the entire window—including the title bar area—and the window control buttons (close, maximize/restore, minimize) are overlaid on top of the client area. The web developer is responsible for drawing and input-handling for the entire window except for the window controls overlay. Developers can use this feature to make their installed desktop web apps look like OS apps.

WritableStream controller AbortSignal

, allowing a WritableStream operation to be stopped if needed. The streams APIs provide ubiquitous, interoperable primitives for creating, composing, and consuming streams of data. This change permits an underlying sink to rapidly abort an ongoing write or close when requested by the writer. Previously, when writer.abort() was called, a long-running write would still have to continue to completion before the stream could be aborted. With this change, the write can be aborted immediately. In addition to being exposed to streams authored in JavaScript, this facility will also be used by platform-provided streams such as WebTransport.

Deprecations, and Removals

This version of Chrome introduces the deprecations and removals listed below. Visit ChromeStatus.com for lists of .

Remove SDES Key Exchange for WebRTC

The SDES key exchange mechanism for WebRTC has been declared a MUST NOT in the relevant IETF standards since 2013. Its usage in Chrome has declined significantly over the last year. SDES is removed because it is a security problem. It exposes session keys to Javascript, which means that entities with access to the negotiation exchange, or with the ability to subvert the Javascript, can decrypt the media sent over the connection.

✕

Ähnliche Beiträge

🔍 Verwandte News

Auch interessante Nachrichten Chrome 98 Beta: Color Gradient Vector Fonts, Region Capture Origin Trial, and More

Thematisch verwandte Begriffe: Chrome, Beta, Color, Gradient · 6 Treffer

• 📌 Alle Themen
• 🏷️ Chrome
• 🏷️ Beta
• 🏷️ Color
• 🏷️ Gradient

• Beiträge
• Videos

🕵️ 🕵️ Sicherheitslücken Exploit-DB.com RSS Feed

[webapps] Grav CMS 2.0.7 - RCE

vor 2 Std. 📆 01.09.2026 um 02:00 Uhr

Vorschau Weiterlesen ↗

🕵️ 🕵️ Sicherheitslücken Exploit-DB.com RSS Feed

[webapps] Bludit CMS 3.20.0 - Reflected Cross-Site Scripting

vor 2 Std. 📆 02.09.2026 um 02:00 Uhr

Vorschau Weiterlesen ↗

🕵️ 🕵️ Sicherheitslücken Exploit-DB.com RSS Feed

[webapps] Marimo 0.20.4 - RCE

vor 2 Std. 📆 02.09.2026 um 02:00 Uhr

Vorschau Weiterlesen ↗

🕵️ 🕵️ Sicherheitslücken Exploit-DB.com RSS Feed

[webapps] Langflow 1.10.0 - RCE

vor 2 Std. 📆 02.09.2026 um 02:00 Uhr

Vorschau Weiterlesen ↗

🕵️ 🕵️ Sicherheitslücken Exploit-DB.com RSS Feed

[webapps] Wolf CMS 0.8.3.1 - RCE v

vor 2 Std. 📆 01.09.2026 um 02:00 Uhr

Vorschau Weiterlesen ↗

🔧 🔧 Programmierung Exploit Development

drakoarmy/datadome-rs: High-end Rust DataDome deobfuscator & solver with VM disassembly — all 3 challenge types (tags, interstitial, slider).

vor 2 Std. 📆 31.08.2026 um 05:43 Uhr

Vorschau Weiterlesen ↗

➕ Mehr Beiträge laden

Laden...

Videos werden geladen ...

• Beiträge
• Videos

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

• Beiträge
• Videos

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

• Beiträge
• Videos

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

• Beiträge
• Videos

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Powered by tsecurity.de tsecurity.de Hub

🚀 Auf tsecurity.de entdecken

tsecurity.de App

Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Jetzt kostenlos installieren