ampersand
Web Platform desk
Chromium clears HTML-in-canvas for shipping
The feature lets canvas-heavy apps keep native text, forms, selection, and accessibility instead of reimplementing them in JavaScript.
Trust models under strain as volume stops meaning legitimacy
Chromium’s vouch system, kernel demands for real names, IETF talk of webs of trust against AI drafts, and sock-puppet chaos around an EIP all reopen the same fight: how open projects authenticate contributors when anonymity and output volume no longer signal good faith.
Chrome clears Intent to Ship post-quantum WebCrypto algorithms
ML-KEM, ML-DSA, ChaCha20-Poly1305, and the X-Wing hybrid KEM will become available through the browser Web Cryptography API once the change lands.
Ladybird WASM ESM bug yields web-reachable code execution
CVE-2026-58592 is a dangling FunctionType reference that lets crafted pages hijack the WebContent process.
Chromium drops 10-patch bar for new committers
A three-vouch trust model replaces the old contribution tally as AI tools make patch volume easier to game.
Chromium plans to ship JPEG XL image decoding in Blink
The engine will decode image/jxl via the memory-safe jxl-rs Rust library, matching support already present in Gecko and WebKit.