Chromium Blog: 2018

Chrome 72 Beta: Public class fields, user activation and more

martes, 18 de diciembre de 2018

ChromeStatus.com Public class fieldspublic class fieldsclass MyComponent extends Component { constructor() { super(); this.state = {}; } render() { doStuff(this.state); } } class MyComponent extends Component { // Create a public field named `state`. state = {}; render() { doStuff(this.state); } } our article on class fieldsthe ChromeStatus entry User Activation Query APIwhether there has been a user activationrequestFullScreen()autoplaywindow.open()postMessage()userActivationnavigatorMessageEvent

hasBeenActive: Indicates whether the associated window has ever seen a user activation in its lifecycle. This property does not reflect whether the current task was triggered by a user activation.

isActive: Indicates whether the associated window currently has a user activation in its lifecycle.

postMessage()WindowWorkerMessagePortincludeUserActivation// Check that WindowPostOptions is supported if (window.parent.postMessage.length === 1) { window.parent.postMessage('resize', {includeUserActivation: true}); } else { window.parent.postMessage('resize', '/'); }if (event.userActivation && event.userActivation.isActive) { return Promise.resolve(); } Other features in this release Cache API: reject addAll() when requests would overwrite each otherCache.prototype.addAll()Cache.prototype.addAll()now rejectsInvalidStateError Intl.ListFormat The new Intl.ListFormat() API helps libraries and frameworks format a list in a localized fashion by providing internationalized messages using a customary local word or phrase when available. Here's an example:const lf = new Intl.ListFormat('en'); lf.format(['dogs']); // → 'dogs' lf.format(['dogs', 'cats']); // → 'dogs and cats' lf.format(['dogs', 'cats', 'hamsters']); // → 'dogs, cats, and hamsters' our Web Fundamentals article Service worker improvements FetchEvent.resultingClientIdFetchEvent.resultingClientId FetchEvents on requests for same-origin favicons.FetchEventservice workers will receive FetchEvent objects MediaStreamTrack resizeMode constraintMediaStreamTrack

"none": the track has the native resolution provided by the camera, its driver, or the operating system.

"crop-and-scale": the browser may use cropping and re-scaling to adjust the resolution of the video produced by the camera.

RTCPeerConnection.connectionState and RTCPeerConnection.onconnectionstatechangedsupports RTCPeerConnection.connectionStateRTCPeerConnection.iceConnectionState Well-formed JSON.stringifyJSON.stringify()JSON.stringify()JSON.stringify()JSON.stringify("\uD800");

Previously, this returned '"�"'

Starting in Chrome 72, this returns '"\ud800"'

Worker unhandled exception propagationunhandled errors now propagate Interoperability Improvements Interoperable File.webkitRelativePath propertyFile.webkitRelativePath/tmp/a/foo/bar/1.txt, /tmp/a/foo/2.txtfoo/bar/1.txt, foo/2.txttmp/a/foo/bar/1.txt, tmp/a/foo/2.txt Treat '#' as ending data URI body contentbothChrome now aligns Removals Don't allow popups during page unloadmay no longer use window.open()Note:
Remove HTTP-Based Public Key Pinningdenial of service and hostile pinningthis feature is being removed Remove rendering FTP resources.migrating off of ittime to move on Deprecations Deprecate TLS 1.0 and TLS 1.1

TLS 1.0 and 1.1 use MD5 and SHA-1, both weak hashes, in the transcript hash for the Finished message.

TLS 1.0 and 1.1 use MD5 and SHA-1 in the server signature. (Note: this is not the signature in the certificate.)

TLS 1.0 and 1.1 only support RC4 and CBC ciphers. RC4 is broken and has since been removed. TLS's CBC mode construction is flawed and was vulnerable to attacks.

TLS 1.0's CBC ciphers additionally construct their initialization vectors incorrectly.

TLS 1.0 is no longer PCI-DSS compliant.

Chrome has now also deprecated Deprecate PaymentAddress.languageCodePaymentAddress.languageCodelanguageCodesmall enough for safe deprecation and removal

Chrome Dev Summit 2018 Day 2: Ready for the next movement

martes, 13 de noviembre de 2018

Chrome Dev Summit day 1 is all wrapped up and we hope you enjoyed discussing what developers can do to build high-quality web experiences today. Now, in day 2 we will give you a preview of the new technologies the Chrome team will be working on over the next year.
Modern navigation on the web Today, moving from page to page on the web feels like a long, slow transition - users have to stare at a white screen as their site loads and if they’re on a bad network, they’re disappointed when they see...nothing.
We want to enable developers to deliver a zero-friction, seamless experience to their users on the web and we’re excited to share two new specifications that we’ve been working on - Web Packaging and Portals.
One way to make loading fast is to get content as close to the user as possible, such as in edge caches. But the rise in HTTPS had the side effect of making this harder to achieve. And while AMP enables us to have privacy preserving pre-rendering of content with lightning fast load times, it came with the nagging issue of the browser not showing the publisher’s URL. Building on the AMP model, we introduced Web Packaging that gives the browser a proof of origin for the resources that it renders. This is achieved through Signed Exchanges, a subset of the full Web Packaging proposal.
So as long as the package is properly signed with a key that corresponds to the domain, it is presented to the user as having come from that domain. This enables privacy-preserving preloading and makes edge caching much easier, because now your content can be distributed to multiple caches without the need for an explicit DNS relationship with that cache. And we’re excited to see that Signed Exchanges are already available for origin trial. One of the first places you can see this in action is with the Google Search developer preview for signed exchange AMP content.
While instant loading is great, Portals take away the entire perception of navigation between pages by enabling multi-page sites to act like single-page applications through the same level of fluid transitions. It’s best when seen in action:

It’s still early in the development of the spec and we’d love your feedback on how we can make them more relevant for your use case.
Smooth user experience without losing developer experience Having buttery smooth interactions is important, and as Mariko said yesterday, you can never add enough butter. However this level of UX often comes with a bitter trade-off, one that none of us like - bad developer experience. But we believe that it IS possible to break this dead-lock and that is where we’ll be spending a lot of our time in the coming year.
The Houdini APIs, such as the CSS Paint API, Animation and Layout Worklets give developers an unprecedented level of control to build new and modern interfaces.

And to give developers a well-lit path and ensure that they don’t regress from their performance goals as they build in incremental features, we’re working to build Feature Policy that catch common mistakes and give developers a signal during staging and more importantly in production. For more on this, tune in to Jason’s talk later today.
Performance at scale Focusing on performance is critical today. Frameworks play a very important role in achieving lasting improvements at scale. We’ve already seen some great work done by various frameworks over this past year, and we want to collaborate and support their efforts in 2019.
So we’re excited to announce that starting today, we’ll be making feedback from framework teams a standard part of the Chrome Intent to Implement process. We want to use this process to include the voice of frameworks within the features that we prioritize.
Secondly, to really strengthen this collaboration, we’re launching a fund with an initial amount of $200,000 to support the development of performance related features in third party frameworks. We’ll share performance goals that we’d love to see “on by default” in frameworks. We’re excited to see what the developer community will come up with given their experience working with frameworks and the wider ecosystem. And based on the potential impact of the proposal, we’ll support your work through direct funding.
We’ll have more to share on this in the coming weeks. In the meantime, developers can go to this link to register interest. Applicants can start an RFC on the github repo of the project they intend to modify and would be considered only if the project’s core maintainers sign-off on the feature.
Meanwhile, stay tuned on the livestream to watch the rest of the sessions of day two of Chrome Dev Summit 2018!
Posted by Malte Ubl and Nicole Sullivan

PageSpeed Insights, now powered by Lighthouse

lunes, 12 de noviembre de 2018

At Google, we know that speed matters and we provide a variety of tools to help everyone understand the performance of a page or site. Historically, these tools have used different analysis engines. Unfortunately, this caused some confusion because the recommendations from each tool were different. Today, we’re happy to announce that Pagespeed Insights (PSI) now uses Lighthouse as its analysis engine. This allows developers to get the same performance audits and recommendations everywhere: on the web, from the command line, and in Chrome DevTools. PSI also incorporates field data provided by the Chrome User Experience Report (CrUX). Version 5 of the PageSpeed Insights API will now provide CrUX data and all of the Lighthouse audits. Previous versions of the PSI API will be deprecated in six months.

PageSpeed Insights provides the following information:

Lab Data. PSI fetches and analyzes the page using Lighthouse, which simulates how a mobile device loads a page. It computes a set of performance metrics for the page (such as First Contentful Paint and Time to Interactive) and summarizes these metrics with a performance score from 0-100. Scores are categorized into three levels; 90 and up is considered to be a good score.

Field Data. PSI also displays real-world performance metrics (First Contentful Paint and First Input Delay) for the page and its origin. (As a result, we’ve also deprecated the origin: query in PSI). Note that not all sites may have field data available for display. The data set relies on a version of the Chrome User Experience Report that is updated daily and is aggregated over the previous 28 days. Keep in mind that the metrics here may be different from the ones in the Lab Data section as they capture a wide spectrum of real-world network conditions and devices used by Chrome users.

Opportunities. PSI provides suggestions on how to improve the page’s performance metrics. Each suggestion in this section estimates how much faster the page will load if the improvement is implemented.

Diagnostics. This section provides additional information about how a page adheres to best practices for web development.

The PSI v5 API now returns this new analysis together with CrUX data, and all Lighthouse category data (Performance, Progressive Web App, Accessibility, Best Practices, and SEO) for a given URL.
We have more information about the changes in our FAQ. If you have any questions, please use Stack Overflow and tag your question with the pagespeed-insights tag.

Posted by Rui Chen and Paul Irish

Chrome Dev Summit 2018: Building a Faster, Smoother, Capable Web

lunes, 12 de noviembre de 2018

Today, we’re welcoming the web community to the 2018 edition of the Chrome Dev Summit. Over the next two days we will celebrate the evolution of the platform and share updates on our efforts moving the web forward with the help of the entire ecosystem.
Chrome’s 10th birthday gave us an opportunity to reminisce about how much Chrome and the web have evolved over the past decade. We love seeing how rich the content, apps, and games you build have become.
Amongst other updates that we’ve made to Chrome, one that we work very hard at is making the browser fast. We see speed as one of the defining and most important features of the web. No other platform can match how quickly a user can go from discovery to the actual experience and move between websites, but this breaks down if the sites take too long to load or if the UI is janky.
Thus, we'd like to collaborate even more with the web developer community in delivering delightfully fast experiences to our end users, from the moment they click on a link.

Fast from the first click HTTPArchive shows that since 2011, sites are using on an average of 8x more JavaScript. We’re starting to see the CPU becoming one of the main performance bottlenecks, especially with more and more code often compiled and executed on under-powered mobile devices.
Businesses who focus on the first load (and beyond) are increasingly seeing great results by focusing on the use of Performance Budgets. These budgets can be based on the byte size of your JavaScript, CSS, images and other resources, as well as other loading metrics. For example, you could specify that Time-to-Interactive will not exceed 5s on an emulated 3G network and specific class of mobile phone.
Consistently staying within budget as you add features over time isn’t easy. After Wayfair noticed their own regressions, they built an internal performance budgeting system for their developers to track their performance scores. Since then, their page speeds have continuously become faster, and they’ve seen a year-over-year conversion rate increase of more than 10%.

Pinterest revamped their mobile web experience focusing on performance and saw an uplift in user sentiment and engagement. Their mobile website is now their top platform for sign-ups! You can see their journey here:

Buttery smooth beyond the click Optimizing the loading speed of your webpage is important, but so is ensuring that the page delivers a smooth, interactive user experience as it loads and after it’s displayed. This means responding to all user input quickly, in less than a 1/10th of a second, and ensuring that the user interface doesn’t “jank”— meaning the UI doesn’t pause and then jump suddenly.
Over the past decade, we’ve been evolving Chrome so that it can off-load as much work as possible from the main thread. For example, now we decode images and parse JavaScript separately, and with Web Workers you can execute long running JavaScript without blocking up the UI.
How buttery smooth can you make your web apps today? Especially if you have non-trivial workloads? Our team set out to explore just this, and the end result is a new application launching today called Squoosh. This powerful image compression tool launches almost instantly, and then manages a smooth UI even when it’s doing heavy work, including using Web Assembly to do more with codecs the browser doesn’t have baked in. Tune in to Jake and Mariko's session later today to learn how they did it. But there is even more to do here, and we are excited about up-coming platform APIs, such as Worklets , Virtual Scroller, and even a scheduler, that help developers build smoother experiences more easily. You’ll hear more about many of these tools and techniques in our Day 2 keynote and beyond.

Capable with deeper integrations We’ve seen that PWAs make it easy to delight your users, grow engagement and increase conversions. Now with deeper integrations to the host OS and the ability to load and run faster than ever, your PWAs can really shine, yet most of these integrations have been focused on mobile-first, or even mobile-only.
Over the last 6 months we’ve been renewing our investments in providing these same set of capabilities across all desktop platforms. Chrome OS has given us a fantastic surface to really push the boundaries of the web, and based on these learnings we are expanding our Desktop PWA support across Chrome for Windows and Linux, with Mac support targeted to land in Chrome 72.

As we bring more and more capabilities to both mobile and desktop, we want to include the voice of the community to ensure we prioritize features that are important to the community. So today we are sharing our plan to get the capabilities YOU need on the web, and how we can work together to make sure we are solving your real world needs.

Helping you as a web.dev We know that you want one place that consolidates all the reference information for modern Web APIs, and this is why we continue to collaborate with MDN on improving the core reference documentation of the web.
We have also heard that you would like more hands on guidance on how to deliver on the principles that make a web experience great. So today, we’re excited to announce a new approach: web.dev.
Through a partnership with Glitch, a deep integration with our Lighthouse tool and best-practice guidance from our team, web.dev helps you improve your site through direct and targeted best-practice and the ability to monitor your sites over time to ensure that you are always able to keep your site fast, resilient and accessible.
As we were working on web.dev, we were inspired by other amazing content on the web that help you learn. Dave Geddes, who created Flexbox Zombies and CSS Grid Critters, created a new learning game. Service Workies helps you understand Service Workers soup to nuts. The first chapter of the adventure is rolling out in beta now. We partnered with Dave to make sure the full adventure can be free to all, so check it out now and whatever you do, listen to Grannie!

Web design, right in the browser
At Chrome Dev Summit we cover all of the updates to our developer centric tools and libraries that you know and love, but we also want to show you a new, early experiment that we would love your feedback on.
We remember the impact that Firebug had when it hit the scene, and how it showed how the browser could be the developer tool platform itself. Now we are also thinking about design on the web, and just as Lighthouse started as a Chrome extension to explore, we have another extension, Project Visbug, which allows you to design — right in the browser. You can download it now, but before you do see it in action right here:

Tune into our livestream or watch the videos on the Chrome Developers Youtube channel to follow the rest of the sessions of the day and watch this space for our Day 2 wrap up blog where we will have some more exciting announcements.
Posted by Ben Galbraith & Dion Almaer

Our commitment to a more capable web

lunes, 12 de noviembre de 2018

Since the beginning of Chrome we have worked to provide a solid foundation for modern web applications. Those capabilities have enabled new experiences on the web that were never thought possible. WASM is enabling new classes of games and productivity apps like Sketchup and AutoCAD, WebRTC enables new ways to communicate, and service workers allow developers to create reliably fast web experiences regardless of network conditions.However, there are some capabilities, like file system access, idle detection, and more that are available to native but aren’t available on the web. These missing capabilities mean some types of apps can't be delivered on the web, or are less useful. To cope, some developers build native apps, or use wrappers like Cordova or Electron to access the underlying capabilities of the device.We strongly believe that every developer should have access to the capabilities they need to make a great web experience, and we want to support them as they do.
Closing the gapWe want to close the capability gap between the web and native and make it easy for developers to build great experiences on the open web. Meanwhile we need to preserve everything that is great about the web. We will rapidly bring new, powerful, portable, and standardized capabilities that unlock key verticals on both mobile and desktop. Giving developers these new tools will empower the open web as a place where any experience can be created, and make the web a first class platform for developing apps that run on any browser, with any operating system, and on any device.We plan to design and develop these new capabilities in an open and transparent way, using the existing open web platform standards processes while getting early feedback from developers and other browser vendors as we iterate on the design, to ensure an interoperable design.Per our practice of open design and public iteration, look for many proposals for new designs to surface at the W3C's Web Incubator Community Group.
What are the initial capabilities?We’ve identified and prioritized an initial set of capabilities we feel are critical to closing the gap between web and native, and have already started work on a handful of them. You can see the list by searching the Chromium bug database for bugs that are tagged with proj-fugu.Personally I’m really excited about the writable file API that make it possible to create web based editors, and event alarms that help perform arbitrary work at some point in the future. But there are plenty more: Web Share Target, Async cookies, Wake Lock, WebHID, user idle detection, just to name a few.
Early feedback is criticalWe developed a process to make it possible to design and develop new web platform capabilities that meet the needs of developers quickly, in the open, and most importantly, work within the existing standards process. It’s no different than how we develop every other web platform feature, but it puts an emphasis on developer feedback.Developer feedback is critical to help us ensure we’re shipping the right features, but it’s easier to change course early in the process. That’s why we’re starting to ask for feedback earlier. When actionable technical and use-case feedback comes in early, it’s easier to course correct or even stop development, without having shipped poorly thought out or badly implemented features. Features being developed at WICG are not set in stone, and your input can make a big difference in how they evolve.It’s worth noting that many ideas never make it past the explainer or origin trial stage. The goal of the process is to ship the right feature. That means we need to learn and iterate quickly. Not shipping a feature because it doesn’t solve the developer need is OK.
Getting everyone involvedThe first API we’re looking for feedback on is the writable files API. We want to hear about your use cases and how you expect the security model to work. And keep an eye on our new capabilities page on developers.google.com/web to see the list of capabilities that we’re working on, and how you can participate.The apps you want to build on the open web should only ever be limited by your imagination, never by missing capabilities. As we look to the future, the gap between web and native will get smaller as browser vendors add new capabilities to the web.Here’s to a more capable open web.
Posted by Pete LePage, dreamer.

Notifying users of unclear subscription pages

jueves, 8 de noviembre de 2018

figure { text-align: center; } figcaption { font-size: 90%; }
Unclear mobile subscriptions

did
Clearer billing information for Chrome usersmobile billing charges best practices

Is the billing information visible and obvious to users? For example, adding no subscription information on the subscription page or hiding the information is a bad start because users should have access to the information when agreeing to subscribe.

Can customers easily see the costs they’re going to incur before accepting the terms? For example, displaying the billing information in grey characters over a grey background, therefore making it less readable, is not considered a good user practice.

Is the fee structure easily understandable? For example, the formula presented to explain how the cost of the service will be determined should be as simple and straightforward as possible.

The warning is shown to users entering unclear billing pages.

Search Consolepublic support forumin our best practicesWebmaster Help Forum

Further protections from harmful ad experiences on the web

lunes, 5 de noviembre de 2018

Last year, after hearing from Chrome users, we launched a set of user protections against “abusive experiences” -- experiences designed to intentionally mislead and trick users into taking action on the web. These protections blocked pop-ups and new window requests from sites with certain abusive experiences like redirecting pages.

However, we've learned since then that this approach did not go far enough. In fact, more than half of these abusive experiences are not blocked by our current set of protections, and nearly all involve harmful or misleading ads. These ads trick users into clicking on them by pretending to be system warnings or “close” buttons that do not actually close the ad. Further, some of these abusive ad experiences are used by scammers and phishing schemes to steal personal information.

Two types of abusive experiences where a deceptive site control appears to do one thing, but has a different behavior when clicked. One looks like a play button on a video but sends the user to an unwanted download when clicked (left), and the other looks like a close button but instead opens unwanted pop-up windows (right).

As a result, today we are announcing expanded efforts to better protect users against these abusive experiences. Starting in December 2018, Chrome 71 will remove all ads on the small number of sites with persistent abusive experiences. Site owners can use the Abusive Experiences Report in their Google Search Console to see if their site contains any of these abusive experiences that need to be corrected or removed. Site owners will have a 30 day window to fix experiences flagged by the Report before Chrome removes ads.

With Chrome, users are always in control and can disable abusive sites filtering by going to their Chrome Settings.

Stronger protections ensure users can interact with their intended content on the web, without abusive experiences getting in the way.

Posted by Vivek Sekhar, Product Manager

Chrome 71 Beta: relative time formats and more

jueves, 25 de octubre de 2018

ChromeStatus.com International Relative Time FormatIntl.RelativeTimeFormat()const rtf = new Intl.RelativeTimeFormat('en'); rtf.format(3.14, 'second'); // → 'in 3.14 seconds' rtf.format(-15, 'minute'); // → '15 minutes ago'formatToParts()Read our article Other features in this release Add FullscreenOptionsElement.requestFullscreen()customized on AndroidnavigationUI"auto""show""hide""auto" Add 'persistent-storage' property to the Permission API"persistent-storage"a new permissionnavigator.storage.persisted()navigator.permissions.query({name:"persistent-storage"}) Async touchpad pinch zoom eventsAsync touchpad pinch zoom events COLR/CPAL font supportChrome now supportsCOLR/CPAL fontsTwemoji CSS gradient color stop double-position syntaxCSS Image Values and Replaced Content Module Level 4linear-gradient(45deg, black 25%, black 50%, white 50%, white 75%)linear-gradient(45deg, black 25% 50%, white 50% 75%) Implement 'left' and 'right' values for 'text-underline-position' support for 'left' and 'right' values'text-underline-position''text-underline-position' JavaScript Modules: Credentials mode defaults to "same-origin"is changing"omit""same-origin" TextEncoderStream and TextDecoderStream APIssupports streamsresponse.body.text()ReadableStreamResponse.BodyResponse.Body.pipeThrough(new TextDecoderStream()) Unprefixed Fullscreen APIThis update MediaElement and MediaStream nodes defined only for AudioContextChrome now only allowsMediaElementAudioSourceNodeMediaStreamAudioSourceNodeMediaStreamAudioDestinationNodeAudioContextOfflineAudioContextOfflineAudioContext Interoperability improvements Call capture event listeners in capturing phase at shadow hostsChrome now callscomplete discussion Improve :host, :host-context, and ::slotted specificityChrome now calculates:host():host-context()::slotted()Shadow DOM v1 spec Deprecations and Removals Remove SpeechSynthesis.speak without user activationspeechSynthesis.speak()now fires an error Remove importScripts() of new scripts after service worker installation.importScripts()After this changeuse importScripts() in two cases

Before installation finishes (from the initial execution of the service worker until it reaches the `installed` state).

After installation finishes, only for scripts that were already imported in the previous phase.

Remove prefixed versions of several APIs

WebKitAnimationEvent - Use the AnimationEvent.

WebKitTransitionEvent - Use the TransitionEvent.

Remove URL.createObjectURL for MediaStreamURL.createObjectURL()has been removedMediaStreamsrcObject Remove document.origin document.originhas been removedself.origin

Chromium Blog

Chrome 72 Beta: Public class fields, user activation and more

Chrome Dev Summit 2018 Day 2: Ready for the next movement

PageSpeed Insights, now powered by Lighthouse

Chrome Dev Summit 2018: Building a Faster, Smoother, Capable Web

Our commitment to a more capable web

Notifying users of unclear subscription pages

Further protections from harmful ad experiences on the web

Chrome 71 Beta: relative time formats and more

Etiquetas

Archive

Feed