Chromium Blog: January 2013

Show off Your Security Skills: Pwn2Own and Pwnium 3

Monday, January 28, 2013

Zero Day InitiativePwn2Own competitionCanSecWest

$110,000: browser or system level compromise in guest mode or as a logged-in user, delivered via a web page.

$150,000: compromise with device persistence -- guest to guest with interim reboot, delivered via a web page.

Chromium OS developer’s guidePosted by Chris Evans, Google Chrome Security Team

Native Client support on ARM

Tuesday, January 22, 2013

Native ClientgoalsNative Client SDKversion 25.nexemanifestPortable Native ClientLLVMStack OverflowforumPosted by David Sehr, Software Engineer

Google Search in Chrome gets more secure

Friday, January 18, 2013

omniboxSecure Sockets LayerSPDY protocolPosted by Adam Langley, Software Engineer

Chrome 25 Beta: Content Security Policy and Shadow DOM

Monday, January 14, 2013

Earlier todayBeta channelthe Beta channel for Chrome for AndroidUnprefixed support for Content Security PolicyContent Security PolicyunprefixedContent-Security-Policy

Prefixed support for Shadow DOMWeb ComponentswebkitCreateShadowRootHTML5 Rocks Shadow DOM Tutorial

test suite
Other platform features

The JavaScript Web Speech API enables speech-to-text on the desktop web. Check out this cool tutorial and demo to learn how to add speech to your webpages.

For speed junkies, the Resource Timing API exposes detailed timing information to JavaScript about subresources loaded by the page, and the User Timing API provides access to high-precision timestamps to help measure web app performance.

Chromium's IndexedDB implementation now supports concurrent transactions. Some web apps may inadvertently rely on sequential transactions, so be sure to test yours in today’s Beta.

Various IndexedDB features have been updated to match the spec: setVersion has been replaced with the new upgradeneeded API, and a few old constants have been removed.

The Web Audio API now exposes an OfflineAudioContext constructor, and a few AudioContext method names have been updated to match the latest spec. Note that Chrome for Android doesn’t support the Web Audio API yet.

The ::cue pseudo-element lets you style WebVTT cues such as HTML5 video subtitles.

releaseannouncement
DevToolsDeveloper Tools

console.clear() helps keep your console clean.

The top toolbar is icon-free, though icons can be re-enabled in settings.

A timeline setting was added: “Show CPU activity on the ruler.” console.log formatting accepts multiple styles. For example: console.log("%cblue! %cgreen!", "color: blue;", "color: green;").

The docking toggle switches between most recent modes; “Dock to Right” is now the default alternative.

Emulate the media type to view print stylesheets and @media blocks.

The CodeMirror editor, replacing the default DevTools editor in Sources Panel, was updated to v3.

Stay in the loopchromestatus.com+Google Chrome DevelopersStable releasePosted by Eric Bidelman, Chrome Developer Advocate and Web Platform Enthusiast

Beta Channel Arrives for Android Phones and Tablets

Thursday, January 10, 2013

Google Playits launch last year

With prefixed support for CSS Filters you can apply visual effects like grayscale, blur, and contrast adjustment to the mobile web. Try this demo on Chrome for Android to see filters in action.

The new Flexible Box Layout Module simplifies the styling of complex layouts.

The dynamic viewport units vw, vh, and vmin can now be used for responsive design.

The <track> element for video provides a simple, standardized way to add subtitles, captions, screen reader descriptions, and chapters. Note that it doesn’t work for fullscreen video on Chrome for Android yet.

The CSS calc() function can be used anywhere a length is required by a CSS properties. It allows mathematical expressions with addition (‘+’), subtraction (‘-’), multiplication (‘*’), and division (‘/’) to be used as component values.

The @sandbox and @srcdoc attributes of the <iframe> element give you more control over inline frames.

Unprefixed IndexedDB gives you access to fast, structured client-side storage.

Our technique to make desktop web pages more readable on mobile screens (now called Text Autosizing) has been improved and is more consistent with other browsers.

V8 has been updated to 3.15 bringing a big speed boost; performance on the Octane benchmark improved on average by 25-30%.

mcrbug.com/newinstall the BetaPosted by Peter Beverloo, Software Engineer and Mobile Web Maestro

Sep	OCT	Nov
	01
2019	2020	2021

Chromium Blog

Show off Your Security Skills: Pwn2Own and Pwnium 3

Native Client support on ARM

Google Search in Chrome gets more secure

Chrome 25 Beta: Content Security Policy and Shadow DOM

Beta Channel Arrives for Android Phones and Tablets

Labels

Archive

Feed