Changes to Cross-Origin Requests in Chrome Extension Content Scripts
tl;dr: To improve security, cross-origin fetches will soon be disallowed from content scripts in Chrome Extensions. Such requests can be made from extension background pages instead, and relayed to content scripts when needed. [The document has been edited on 2020-09-17 to reflect that CORS-for-content-scripts has successfully launched in Chrome 85*.]*** Overview When web pages request cross-origi
SameSite Updates
Confused? Start here. Developers: Check out our testing and debugging tips. Adding `SameSite=None; Secure` to your cookies? Check the list of incompatible clients here. Check the list of Frequently Asked Questions (FAQ) for common scenarios and use cases. Launch Timeline Last updated Mar 18, 2021. Latest update: Mar 18, 2021: The flags #same-site-by-default-cookies and #cookies-without-same-site-m
The Privacy Sandbox
Overview The Privacy Sandbox project’s mission is to “Create a thriving web ecosystem that is respectful of users and private by default.” The main challenge to overcome in that mission is the pervasive cross-site tracking that has become the norm on the web and on top of which much of the web’s ability to deliver and monetize content has been built. Our first principles for how we’re approaching
Flash Roadmap
Developer Recommendations Ultimately we recommend migrating towards HTML5 content, however for sites that still require Flash Player in the interim we recommend presenting users with a link/ image to "Enable" Flash Player that points to "https://get.adobe.com/flashplayer/." When users click on that link Chrome will present the necessary UI to enable Flash Player for the site. It will look somethin
Out-of-Process iframes (OOPIFs)
This page provides an overview of Chromium's support for out-of-process iframes (OOPIFs), which allow a child frame of a page to be rendered by a different process than its parent frame. OOPIFs were motivated by security goals like the Site Isolation project, since they allow a renderer process to be dedicated to a single web site, even when cross-site iframes are present. OOPIFs are a general mec
Design Documents
Start Here: Background Reading Multi-process Architecture: Describes the high-level architecture of Chromium Note: Most of the rest of the design documents assume familiarity with the concepts explained in this document. How Blink works is a high-level overview of Blink architecture. The "Life of a Pixel" talk (slides / video) is an introduction to Chromium's rendering pipeline, tracing the steps
Core Principles
These are the things that are important to us: these principles shape the product that we build. Note that the examples given are meant to be illustrative rather than exhaustive. Speed Our objective is to make the fastest browser - and we tackle this in a number of ways. Because the speed of rich web applications is important to us, we develop our own JavaScript engine, called V8. Because the spee
Flash Usage Trends
Volume [<img alt="image" src="/flash-roadmap/flash-usage-trends/Flash%20Volume%20-%20Update%20July%209.png">](/flash-roadmap/flash-usage-trends/Flash%20Volume%20-%20Update%20July%209.png) Absolute volume of Flash Impressions (on Chrome Stable for Windows and MacOS) Percent of Daily Actives Percent of users who have encountered at least one page w/ Flash Player content in a day (on Chrome Stable fo
The Trace Event Profiling Tool (about:tracing)
When diagnosing performance problems it can be valuable to see what Chrome is doing "under the hood." One way to get a more detailed view into what's going on is to use the about:tracing tool. Tracing records activity in Chrome's processes (see multi-process architecture for more on what each process is doing). It records C++ or javascript method signatures in a hierarchical view for each thread i
Marking HTTP As Non-Secure
This page contains the original proposal for marking HTTP as non-secure (see Original Proposal below). Since then, the Chrome usable security team has announced the following phases towards this goal. For more information see, the WebFundamentals article: Avoiding the Not Secure Warning in Chrome Timeline January 2017 (Phase 1) Takes effect: January 2017 (Chrome 56) Announcement: Moving towards a
Speed Hall of Fame
For some time in 2013-2015, we listed a performance improvement of the week. This page is now here for historical purposes. But, feel free to nominate future changes! All Chromium contributors are eligible. To ensure a change is considered, nominate it to perf-sheriffs@chromium.org. 2015 2015-02-11 This week, we highlight the performance sheriffing process working as it should due to reliability i
GPU Accelerated Compositing in Chrome
Tom Wiltzius, Vangelis Kokkevis & the Chrome Graphics team updated May 2014 This code is changing due to Slimming Paint and thus there may be large changes in the future. Note also that some class names may have changed (e.g. RenderObject to LayoutObject, RenderLayer to PaintLayer). Summary This document provides background and details on the implementation of hardware-accelerated compositing in C
Documentation for Administrators
This page describes the features and details of Chromium’s central management of policies and preferences. Chromium supports methods of managing the browser's behavior centrally, through group policy, MCX files, and external configuration files. This gives you, as an administrator, a way to manage the installations of Chromium-based browsers in your organization. These policies are strictly intend
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Chromium Development Calendar (Chromium Developer Documentation)
Web Tests