Tag
Google's decision to remove XSLT from Chromium-based browsers takes effect around November 17, 2026, prompting developer backlash over broken web compatibility promises and warning banners injected into affected sites.
The author argues AI agents are outpacing their reliability, since even a correct model can fail when the control layer feeding it state (timeouts, re-renders, stale pages) is wrong, and introduces Chrome Controlla, an open-source Apache 2.0 browser control layer that tracks tab/document state, recovers changed elements, waits for UI to settle, and reports unknown action outcomes instead of blindly retrying.
Google is updating Chrome's autofill with AI that can pull details like flight confirmations, tracking numbers, and addresses from users' Gmail to fill out online forms, rolling out to U.S. desktop, iOS, and Android users as part of its Personal Intelligence initiative.
Chrome and Edge are removing XSLT support from their engines; the article explains which web features and sites will break and which use cases will continue to work.
Apple 推出营销页面，宣传用户从 Chrome 切换到 Safari，强调 Safari 在速度、电池续航和隐私保护方面优于 Chrome，并支持跨设备同步、密码管理和扩展功能。
Gemini 4 Argon tops the Val Index, completing agentic tasks at half the cost of Opus 5.5, and Google's Chrome team used it to refactor around 6 million lines of legacy code out of a 40-million-line codebase, eliminating an entire category of browser crashes.
XBOW 使用 GPT-5.6 Sol 耗时 6 天、约 4 万美元算力发现 Chrome 全链漏洞，获得 Google 25 万美元赏金，成为 2026 年 Google 首个全链奖励，影响约 10 亿用户。
Apple 发起新的「Switch to Safari」宣传战役，通过新官网页面和两支 YouTube 视频强调 Safari 在电池续航、隐私保护和性能上优于 Chrome。
推荐 FluentRead，一个开源浏览器翻译插件，具备双语网页翻译、AI 阅读卡片、图片与文档翻译及双语视频字幕等功能，并集成了 DeepSeek Harness 会话核心用于上下文解释与追问。
Chrome 154 引入了 frame-sizing CSS 属性和 responsive-embedded-sizing 元标签，让跨源 iframe 可以自动根据内容高度自适应，无需 postMessage 或 resize 脚本，但要求嵌入页面主动配合。文章对比了过去用 JavaScript 测量高度的种种问题，并介绍了新方案的用法与限制。
Google announces that the JPEG XL image format will ship in Chrome, marking a notable update for web imaging standards and performance.
Google reported a series of third-party ccTLD registry hijacks affecting .gh, .sl, and .as domains, where attackers modified DNS records and obtained unauthorized HTTPS certificates. Chrome blocked these certificates via CRLSets, revoked them with the issuing CAs, and Google urged domain owners to monitor Certificate Transparency logs and publish restrictive CAA records.
MemoryPet 2.0 is a Chrome toolbar extension that uses animated pets to monitor system memory and CPU usage, with new features like CPU tracking, additional pets, and usage graphs.
An exploit kit named BlueMoon, targeting critical vulnerabilities in Chromium browsers and Windows, has been used by at least four hacking groups, some with ties to the Chinese government. Researchers from Proofpoint reported rapid deployment and sharing of the kit, possibly aided by AI, within a patch gap in the Chromium supply chain.
Chrome has switched to a two-week update cycle to improve security in the AI era and speed up feature deployments, prompting other browsers to follow suit.
WebMCP is a browser API from Chrome and Edge teams that lets websites declare actions for AI agents, providing a more reliable and efficient way for agents to interact with web content compared to other methods.
V8 has implemented speculative call_indirect inlining and deoptimization support for WebAssembly, significantly improving performance, especially for WasmGC programs with speedups up to 50% in benchmarks.
Anthropic upgrades the Claude side panel in Chrome into a full Cowork session, letting Claude read web pages, fill forms, run background tasks, and integrate with tools like Google Drive, CRM, and analytics dashboards. Sessions sync across devices and work with existing skills, plugins, and connectors.
The article explains why tiny JPEGs can look different in Chrome compared to other browsers, due to a JPEG decoding optimization that skips high-frequency DCT coefficients during heavy downscaling.
Chrome begins rolling out Device Bound Session Credentials (DBSCs), a new protection that binds session cookies to a device's TPM or Secure Enclave, making stolen cookies useless for account takeovers.