|
Description:
|
|
# ep64 Monthly Web 202002
第 64 回のテーマは 2020 年 2 月の Monthly Web です。
### Chrome 動向
- Stable: 80
- Updates
- *New in Chrome 80*
- https://developers.google.com/web/updates/2020/02/nic80
- Modules in workers
- Optional chaining in JavaScript
- New Origin Trials
- Content indexing API
- Notification triggers
- Web Serial
- The ability for PWAs to register as file handlers
- New properties for the contact picker
- Graduated from origin trial
- scroll to text fragment
- display: minimal-ui
- SVG favicon
- The Chromium Chronicle: Catching UI Regressions with Pixel Tests
- https://developers.google.com/web/updates/2020/02/chromium-chronicle
- Adding notification permission data to the Chrome User Experience Report
- https://developers.google.com/web/updates/2020/02/notification-permission-data-in-crux
- Trusted Web Activities, the Lay of the Land
- https://developers.google.com/web/updates/2020/02/twa-lay-of-the-land
- *Chromium Blog: Protecting users from insecure downloads in Google Chrome*
- https://blog.chromium.org/2020/02/protecting-users-from-insecure.html
- 平文通信のダウンロードを段階的にできないように
- *Chromium Blog: Videos with fewer intrusive ads*
- https://blog.chromium.org/2020/02/videos-with-fewer-intrusive-ads.html
- 長い動画広告を中断するように
- Chromium Blog: SameSite Cookie Changes in February 2020: What You Need to Know
- https://blog.chromium.org/2020/02/samesite-cookie-changes-in-february.html
- Chromium Blog: Chrome 81: Near Field Communications, Augmented Reality, and More
- https://blog.chromium.org/2020/02/chrome-81-near-field-communications.html
- Web NFC for mobile
- Augmented Reality and Hit Testing
- PointerLock unadjustedMovement Origin Trials
- Buffered Flag for Long Tasks
- *CSS image-orientation property*
- CSS Color Adjust: color-scheme
- Exclude Implicit Tracks from grid-template-rows and grid-template-columns Resolved Values
- hrefTranslate attribute on HTMLAnchorElement
- IntersectionObserver Document Root
- *Modernized Form Controls*
- Move onwebkit{animation,transition}XX handlers to GlobalEventHandlers
- *Position State for Media Session*
- SubmitEvent
- WebAudio: ConvolverNode.channelCount and channelCountMode
- RTCPeerConnection.onicecandidateerror event changes
- onclosing Event for RTCDataChannel
- WorkerOptions for shared workers constructor
- WritableStream.close()
- Intl.DisplayNames()
- *Deprecation and Remove "basic-card" support Payment Handler*
- Remove supportedType field from BasicCardRequest
- Remove the `` element
- *Remove TLS 1.0 and TLS 1.1*
- TLS 1.3 downgrade hardening bypass
- Interact with NFC devices on Chrome for Android
- https://web.dev/nfc/
- Augmented reality: You may already know it
- https://web.dev/web-ar/
- Virtual reality comes to the web, part II
- https://web.dev/vr-comes-to-the-web-pt-ii/
- Positioning virtual objects in real-world views
- https://web.dev/ar-hit-test/
- Intents
- Ship: Insecure Download Blocking in Secure Contexts
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/ExW7oa5kMrk/Y7x7cxMTAwAJ
- Ship: Simplified auto-disabling of -webkit-appearance
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/uNKeyd8091A/eBJIdtXqAgAJ
- Ship: IndexedDB relaxed durability transactions
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/P7Jpm9JW6q8/bhl3sT5bBgAJ
- Ship: Support ARIA Annotations from ARIA 1.3 draft
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/2uume_z0n8M/dUFRWmVNBgAJ
- Ship: disallowdocument access iframe attribute
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/TzuPAx9ZOk0/HYOf3FFFBgAJ
- *Ship: CSS contain-intrinsic-size*
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/Dbpth-n7LZo/vtyZAmMIBgAJ
- *Ship: Custom state pseudo class*
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/dJibhmzE73o/jzB1zkJeCQAJ
- Custom Component などで独自の疑似クラスを定義できる
- Implement and Ship: 'font-display: optional' without relayout
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/QsgMjIyO8qA/RWWWukoaAgAJ
- Prototype and Ship: support "JIS-B5" and "JIS-B4" @page sizes
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/nlHnGz-oj-Y/mdPEneaOBwAJ
- Prototype: input.rawValue
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/FMPV2LCc0Ho/X4minYyAAQAJ
- Prototype: MediaCapabilities: Query HDR with decodingInfo()
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/jBzVLBz-Yk4/ORuQg2zAEwAJ
- *Prototype: prefers-reduced-data*
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/oNJTem41LBs/CA4Nx05aAwAJ
- Save-Data の CSS 版
- Data Saver などが有効な場合に、 background-image を無くすとか
- Prototype: CanMakePaymentEvent.respondWithMinimalUI
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/kTLpgFJz6Ck/IQeiGDtOAwAJ
- *Prototype: CSS primitives for foldable devices*
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/KsPRO3hkOGw/md4jgIAaAgAJ
- 折りたたみデバイス向けの CSS
- Prototype: Delegated Ink Trail
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/JeGBzAfR_Bw/Ppo1u7ofBgAJ
- Prototype: WebRTC RTP header extension control
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/65YdUi02yZk/dXL1a8PYBQAJ
- *Prototype: Declarative Shadow DOM*
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/nJDc-1s3R9U/uCJKsEqpAwAJ
- 宣言的な Shadow DOM の定義
- `` にするとその下が Shadow DOM として扱われる
- Shadow DOM が SSR できる
- *Prototype: Media Feeds*
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/D1sGl6UkCzs/bSiEw3rlCAAJ
- Web App Manifest に "dataFeedElement" を追加
- RSS などがあることを UA に伝える
- *Prototype: Imperative Shadow DOM Distribution API*
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/TNYIAu5E_M4/1i7LME9WCwAJ
- Shadow DOM への slot の割当を命令的に行う?
- ``/`` みたなことが、今の slot の仕組みだとできない
- *Prototype: URL Protocol Handler Registration for PWAs*
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/x4Ev_l9Oj2U/6bGPs7MVCwAJ
- Web App Manifest に "protocol_handler" を追加
- 他のアプリや Web アプリを呼べるように
- Prototype: Web Bluetooth getDevices()
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/UHRmDD20FWE/sCmwI9oxGgAJ
- Experiment: scheduler.postTask
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/31qZ-bMToM8/bLhpSdXhEgAJ
- *Experiment: Querying HTTPSSVC*
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/brZTXr6-2PU/g0g8wWwCAwAJ
- HTTPS に関わる追加情報を入れた DNS record の HTTPSSVC を取得するように
- ESNI, ALT-SVC, HSTS 情報などを入れる
- Deprecate GetPreferredTryMasters
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/2MYXEr2Q11o/3URSq3mQCQAJ
- Remove: @import rules in CSSStyleSheet.replace()
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/RKG8oxp22RY/fdFnG1rGCgAJ
- [Web-Facing Change PSA] Chrome will block insecure downloads from secure contexts
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/XDrJNswwlh0/eK6eoLm9AQAJ
- PSA: ExecutionContext is moving from Document to LocalDOMWindow
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/oT0UlFvqz0g/KfcepAq9AQAJ
- PSA: Moving SHA-1 and 3DES in TLS to a fallback
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/yaJcs4p9LNI/haZWzX-UBwAJ
- PSA: Periodic prioritization of rendering on the renderer's main thread in M81
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/NUMVehBQ9yc/L4c9OMyHBwAJ
- PSA: content-type attached to beacon with ArrayBufferView has changed
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/k_JNBV9OC1s/R4JmR8VjBwAJ
- *Blink API OWNERS Requirements*
- https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/erJ4pMd5rv8/qCWFqIwDAwAJ
- https://www.chromium.org/blink/blink-api-owners-requirements
- API オーナーの満たすべき基準
- Your flag: unsafely-treat-insecure-origin-as-secure is expiring in M82
- https://groups.google.com/a/chromium.org/forum/#!msg/security-dev/U2E2WGMhd14/W_bOimPQBQAJ
- Your flag: allow-insecure-localhost is expiring in M82
- https://groups.google.com/a/chromium.org/forum/#!msg/security-dev/sSswK_C-AM8/-aKfcWPQBQAJ
- Your flag: enable-layout-ng is expiring in M82
- https://groups.google.com/a/chromium.org/forum/#!msg/layout-dev/QDrBnD9KM9M/6GXd5PjhAQAJ
- v8
- *V8 release v8.1 · V8*
- https://v8.dev/blog/v8-release-81
- Intl.DisplayNames
- Understanding the ECMAScript spec, part 1 · V8
- https://v8.dev/blog/understanding-ecmascript-part-1
- ECMAScript 仕様の読み方の解説
- hasOwnProperty を例に読み進め方が書かれている
- Other
- *Chromium Platform Security Summit!*
- https://groups.google.com/a/chromium.org/forum/#!msg/security-dev/dPfHNzHWr5I/WmvdrwXeBAAJ
- I/O の前くらいに開催予定
- Behind the Scenes: Deploying the AMP Runtime – The AMP Blog
- https://blog.amp.dev/2020/02/05/behind-the-scenes-deploying-the-amp-runtime/
- Official Google Webmaster Central Blog [EN]: Google Search News for January 2020
- https://webmasters.googleblog.com/2020/01/google-search-news-for-january-2020.htm
- Project Zero: A day^W^W Several months in the life of Project Zero - Part 1: The Chrome bug of suffering
- https://googleprojectzero.blogspot.com/2020/02/several-months-in-life-of-part1.html
- Project Zero: A day^W^W Several months in the life of Project Zero - Part 2: The Chrome exploit of suffering
- https://googleprojectzero.blogspot.com/2020/02/several-months-in-life-of-part2.html
- Project Zero: Escaping the Chrome Sandbox with RIDL
- https://googleprojectzero.blogspot.com/2020/02/escaping-chrome-sandbox-with-ridl.html
- Project Zero: Mitigations are attack surface, too
- https://googleprojectzero.blogspot.com/2020/02/mitigations-are-attack-surface-too.html
- Report on browser privacy
- https://groups.google.com/a/chromium.org/forum/#!msg/net-dev/S00RPKuvImU/UXT4JSu1CAAJ
- QuicTransport Custom Certificate API - Invitation to comment
- https://groups.google.com/a/chromium.org/forum/#!msg/net-dev/r3YDvZfjOqA/qQARnV4pBAAJ
### Firefox 動向
- Stable: 73.0.1
- Updates
- *Securing Firefox with WebAssembly - Mozilla Hacks - the Web developer blog*
- https://hacks.mozilla.org/2020/02/securing-firefox-with-webassembly/
- WASM で作ったサンドボックス内でコードを実行しセキュアにしていく話し
- 主に 3rd Party Libs から注力していく
- Firefox 73 is upon us - Mozilla Hacks - the Web developer blog
- https://hacks.mozilla.org/2020/02/firefox-73-is-upon-us/
- Firefox 73 for developers - Mozilla \| MDN
- https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Releases/73
- *Firefox 73.0, See All New Features, Updates and Fixes*
- https://www.mozilla.org/en-US/firefox/73.0/releasenotes/
- These Weeks in Firefox: Issue 69 – Firefox Nightly News
- https://blog.nightly.mozilla.org/2020/02/14/these-weeks-in-firefox-issue-69/
- *Firefox continues push to bring DNS over HTTPS by default for US users - The Mozilla Blog*
- https://blog.mozilla.org/blog/2020/02/25/firefox-continues-push-to-bring-dns-over-https-by-default-for-us-users/
- US で DoH がデフォルト有効に
- The Facts: Mozilla's DNS over HTTPs (DoH) - Open Policy & Advocacy
- https://blog.mozilla.org/netpolicy/2020/02/25/the-facts-mozillas-dns-over-https-doh/
- DoH についての FAQ
- Intents
- *Ship: a change to the initial value of image-orientation*
- https://groups.google.com/forum/#!msg/mozilla.dev.platform/PDYzBgRz8gk/6biEHyB_BwAJ
- image-orientation の初期値を none から from-image にする
- EXIF の持つ回転の情報がデフォルトで使われるように
- Ship: Autodiscovery of WebExtension search engines
- https://groups.google.com/forum/#!msg/mozilla.dev.platform/mc-JJFw85HM/f-VJ4PncBgAJ
- Ship: SubmitEvent interface
- https://groups.google.com/forum/#!msg/mozilla.dev.platform/ZyUPHkyLun8/XvYEqPncBgAJ
- Ship: form.requestSubmit()
- https://groups.google.com/forum/#!msg/mozilla.dev.platform/NB0Ht1UGoSw/KiPRi_ncBgAJ
- Implement and ship: updated values for text-decoration properties
- https://groups.google.com/forum/#!msg/mozilla.dev.platform/Rxnb4jD5gU8/J0Q7Rc7OAwAJ
- *Prototype and ship: CSS comparison functions: min() / max() / clamp()*
- https://groups.google.com/forum/#!msg/mozilla.dev.platform/i6V9W5XJjpA/DoxHJkiqBwAJ
- *Prototype and ship: lazy load images*
- https://groups.google.com/forum/#!msg/mozilla.dev.platform/3CH2pXxTWl4/xXc4_7QJBQAJ
- *Prototype and ship: ARIA annotations*
- https://groups.google.com/forum/#!msg/mozilla.dev.platform/eh_O7G4H26Q/mFy5IambGQAJ
- Prototype and ship: running background color animations on the compositor thread
- https://groups.google.com/forum/#!msg/mozilla.dev.platform/rHmM7kQaH7Q/jdrJS7sgCQAJ
- *Prototype: :focus-visible pseudo-class.*
- https://groups.google.com/forum/#!msg/mozilla.dev.platform/QzmcYfffVQ4/gk8iCALCCAAJ
- Prototype: Document as explicit root of an intersection observer
- https://groups.google.com/forum/#!msg/mozilla.dev.platform/64nDLTAZGzY/CQMV7WqtCAAJ
- Implement: CSS conic-gradient
- https://groups.google.com/forum/#!msg/mozilla.dev.platform/CSbRi8-MrMM/wtFU1ZNcBwAJ
- Deploy: ThreadSanitizer
- https://groups.google.com/forum/#!msg/mozilla.dev.platform/C76EeB0KutU/5SWRsczOAwAJ
- Unship: Recursive call of Document.execCommand() (Only Nightly and early Beta for now)
- https://groups.google.com/forum/#!msg/mozilla.dev.platform/HTKNoyWuYtc/RRa-QRwFBwAJ
- Unship: system SQLite support on Linux (--enable-system-sqlite)
- https://groups.google.com/forum/#!msg/mozilla.dev.platform/JqG26XiPl94/fuSiK7UJBQAJ
- Other
- It's the Boot for TLS 1.0 and TLS 1.1 - Mozilla Hacks - the Web developer blog
- https://hacks.mozilla.org/2020/02/its-the-boot-for-tls-1-0-and-tls-1-1/
- *(とりこぼし) backgroundsync と periodicbacgkroundsync が harmful に*
- https://github.com/mozilla/standards-positions/pull/232/files
- *Images are now rotated by default according to Exif data \| Firefox Site Compatibility*
- https://www.fxsitecompat.dev/en-CA/docs/2020/images-are-now-rotated-by-default-according-to-exif-data/
- 画像の表示に Exif の rotate 情報をみるように
- Resolve data breaches with Firefox Monitor \| The Firefox Frontier
- https://blog.mozilla.org/firefox/resolve-data-breaches/
- *Intent to implement: Cookie SameSite=lax by default and SameSite=none only if secure*
- https://groups.google.com/d/msg/mozilla.dev.platform/nx2uP0CzA9k/REUNAW2YGQAJ
- Nightly で SameSite=Lax がデフォルト有効に
### Safari 動向
- Stable: 13.0.5
- Updates
- Release Notes for Safari Technology Preview |