Google Chrome 78 released with 37 security fixes

Google Chrome 78 released with 37 security fixes

Google’s chrome browser has today recieved update to 78 or Windows, Mac, Linux, Android and iOS operating system platform. The update includes the CSS Property and Values API, Native File System API, new Origin Trials and dark ode improvements on the Android and iOS platforms.

You can update to the latest version now using Chrome’s built-in updater or download it directly from google.com/chrome. With over 1 billion users, Chrome is both a browser and a major platform that web developers must consider. With Chrome’s regular additions and changes, developers often have to stay on top of everything available as well as what has been deprecated or removed.

What’s New Features

  • Customization Menu for New Tab Page
  • Password Checkup extension Support
  • DNS over HTTPS trials
  • Forced Dark Mode
  • Tab Hover Cards

Previously, password checkup extension tells users about if their passwords had been leaked in public breaches, now the extension available in this chrome browser version.

You can turn on Password Checkup from your chrome browser as follow;

chrome://flags/#password-leak-detection

DNS Over HTTPS (DoH)

The idea is to bring the key security and privacy benefits of HTTPS to DNS, which is how your browser is able to determine which server is hosting a given website. For example, when connected on a public WiFi, DoH would prevent other WiFi users from seeing which websites you visit, as well as prevent potential spoofing or pharming attacks.

Tab Hover Cards

The features to help users who open several tabs. It gives the information about the tab details when hovering on it.

chrome://flags/#tab-hover-cards

XSS Auditor Removed

Google developers have removed the Old XSS Auditor, which was available since chrome V4.

The XSS Auditor can introduce cross-site information leaks and mechanisms to bypass the Auditor are widely known.

Chrome 78 removes the XSS Auditor due to privacy concerns and also implements the CSS Properties and Values API to let developers register variables as full custom properties. This way, you can ensure they are always a specific type, set a default value, or even animate them.

The new Native File System API lets developers build web applicatons that interact with files on the user’s local device. This means IDEs, photo and video editors, text editors etc., can take advantatge of this feature to do more. After a user grants access , the API allows the web app to read or save chages directly to files and folders by invoking the platform’s own open and save dialog boxes. Chrome 78 also adds Signed Exchanges and SMS Reciever API. The Signed Exchanges allow a distributoe to provide content signed by a publisher. The SMS API allows websites to send access SMS messages that are delivered to the user’s phone. Chrome 78 implements 37 security fixes, having spent at least $58,500 in bg bounties for this release.

As always the security fixes alone should be enough incentivs for you to upgrade. Chrome 78 also has an updated V8 JavaScript engine. Version 7,8 includes script streaming on preload, faster object destructuring, lazy source positions, faster RegExp match failures, WebAssembly C/C++ API, and improved WebAssembly startup time.

More Information

Share with