Safari releases are development hell ★★★★★
Safari 16.4 rolled out last week, and for us it's been a nightmare. We make the browser-based game creation app Construct. Early versions of Safari 16.4 broke opening projects, previewing projects, and all existing content published with Construct, all in different ways. I wanted to share our experience so customers, developers, regulators, and Apple themselves can see what we go through with what
Web Push for Web Apps on iOS and iPadOS
Today marks the release of iOS and iPadOS 16.4 beta 1, and with it comes support for Web Push and other features for Home Screen web apps. Today also brings the first beta of Safari 16.4. It’s a huge release, packed with over 135 features in WebKit — including RegExp lookbehind assertions, Import Maps, OffscreenCanvas, Media Queries Range Syntax, @property, font-size-adjust, Declarative Shadow DOM
CNAME Cloaking and Bounce Tracking Defense
This blog post covers several enhancements to Intelligent Tracking Prevention (ITP) in Safari 14 on macOS Big Sur, Catalina, and Mojave, iOS 14, and iPadOS 14 to address our latest discoveries in the industry around tracking. CNAME Cloaking Defense ITP now caps the expiry of cookies set in so-called third-party CNAME-cloaked HTTP responses to 7 days. On macOS, this enhancement is specific to Big S
Tracking Prevention in WebKit
ContentsTerminologyThe Default Cookie PolicyPrivate Browsing ModePartitioned Third-Party StoragePartitioned Service WorkersPartitioned Third-Party HTTP CacheAnti FingerprintingIntelligent Tracking Prevention (ITP) WebKit has implemented tracking prevention technologies, spanning from 2003 with Safari 1.0 until today. Most of them are on by default. This document describes shipping behavior includi
WebKitとBlinkのスタンスの違い
Life with Web Browser Engine (Gecko, WebKit and etc), Mobile and etc. 最近WebKitとBlinkの実装が異なってることでいろいろ困っているんですが、その話はさておき、WebKitのスタンスが明確にわかるようなメールスレッドが最近あった。 Web NFCのエディタのFrançois Beaufort (Google)がWebKitサイドへWeb NFCについての意見を聞きたいということで、webkit-devにメールを投げたのだけど、そのお話。 メールスレッドはこれ。 https://lists.webkit.org/pipermail/webkit-dev/2020-January/031006.html 事実上WebKitトップのMaciejが、 We do not believe a permission prom
Tracking Prevention Policy
ContentsTracking DefinitionsTypes of TrackingTracking We Will PreventPolicy CircumventionNo ExceptionsUnintended ImpactAcknowledgements This document describes the web tracking practices that WebKit believes, as a matter of policy, should be prevented by default by web browsers. These practices are harmful to users because they infringe on a user’s privacy without giving users the ability to ident
Announcing the WebKit Tracking Prevention Policy
Today we are publishing the WebKit Tracking Prevention Policy, covering: What types of tracking WebKit will prevent. When other tracking countermeasures come into play such as limiting capabilities and informed user consent. How WebKit handles unintended impact of our tracking prevention. We’d like to thank Mozilla for their anti-tracking policy which served as inspiration for ours. Please send us
WebKitを利用してWebサービスをmacOSのネイティブアプリのようにしてくれるユーティリティアプリ「Flotato」がリリース。
Flotato FlotatoはElectronラッパーではなく、Fluidと同様にWebkitを利用しているため軽量で、Twitterをアプリ化した場合、Chromeのメモリ使用率の10%で同じWebサービスを利用可能ができ、プリセットされたWebサービスだけでなくユーザーが任意のWebページをアプリ化することも出来ます。 Flotato’s Webkit browser is native macOS. Not Electron. That’s how Flotato for Twitter gets away with using just 10% of Chrome’s memory usage running the same app. The app files are nimble, too. Drowning in browser tabs? – Flotato また、Fl
ITP Debug Mode in Safari Technology Preview 62
One of the more frequent questions we get from developers regarding Safari’s Intelligent Tracking Prevention (ITP) is how to debug your website with it enabled, especially since it is enabled by default in Safari. Today we’re happy to present you with an experimental version of ITP Debug Mode. Please try it out and send us feedback. Enable ITP Debug Mode This is how you enable ITP Debug Mode in Sa
Protecting Against HSTS Abuse
HTTP Strict Transport Security (HSTS) is a security standard that provides a mechanism for web sites to declare themselves accessible only via secure connections, and to tell web browsers where to go to get that secure version. Web browsers that honor the HSTS standard also prevent users from ignoring server certificate errors. Apple uses HSTS on iCloud.com, for example, so that any time a visitor
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
View Transitions API Level 1 · Issue #48 · WebKit/standards-positions
Release Notes for Safari Technology Preview 131
217364 – [macOS] Bump reported current shipping release UA to 10_15_7
216593 – [macOS] Limit reported macOS release to 10.15 series
213595 – [WebAuthn] Use MediaOnly user gesture
198181 – Cookies with SameSite=None or SameSite=invalid treated as Strict
explainers/sms-one-time-code-format at main · WebKit/explainers
GitHub - WebKit/explainers: Explainers from WebKit contributors
Changeset 241863 – WebKit
182414 – Async arrow function with var declaration has incorrect shadowing