Google released Chrome 154 as the newest stable version of its flagship browser on September 25. The update makes two user‑facing changes default: an automatic resizing mechanism for iframes and a confirmation dialog that appears before the browser connects to sites that use the unencrypted http:// scheme. In addition, the release bundles a range of CSS and JavaScript API extensions aimed at developers.
Automatic iframe resizing simplifies embedded content
Historically, developers who wanted an iframe to grow or shrink based on the size of the embedded document had to write JavaScript that measured the child page, sent the dimensions to the parent via postMessage(), and then adjusted the iframe’s height attribute. Chrome 154 removes that complexity. By applying a specific CSS rule to the iframe element on the parent page and inserting a meta tag into the embedded page, the browser automatically matches the iframe’s height to the content’s layout. The change streamlines the creation of dynamic widgets such as blog sidebars, comment sections, and third‑party embeds, where the amount of content can vary widely.
Alongside the iframe improvement, Chrome 154 expands scroll‑marker‑related CSS capabilities. The scroll-marker-group property now supports two distinct modes. In the default “links” mode, markers act as navigation links, allowing users to move focus sequentially with the Tab key. When the “tabs” mode is selected, the group behaves like a tab list: only the active marker receives focus, arrow keys shift focus between markers, and content belonging to inactive tabs is omitted from the accessibility tree. This dual‑mode approach gives developers greater flexibility to build accessible carousels and tabbed interfaces using primarily CSS.
Security upgrade: ask before HTTP
Chrome 154 also changes the default handling of insecure connections. The new “Ask before HTTP” setting triggers a confirmation prompt whenever a user attempts to navigate to a URL that begins with http://. While HTTPS encrypts traffic between browser and server, HTTP transmits data in clear text, exposing users to potential interception or tampering. By prompting users, Chrome reduces the likelihood of accidental exposure to insecure sites. Enterprise administrators can still manage the behavior through the HttpsOnlyMode policy, which provides granular control over the feature in managed environments.
The release notes also mention that the browser’s Background Fetch API now enforces Cross‑Origin Resource Sharing (CORS) rules, and that attempts to reach local or loopback addresses require explicit Local Network Access permission. These measures tighten the security model for background network operations and local‑network interactions.
Developer‑focused API additions and platform enhancements
Developers receive a suite of new APIs and refinements in Chrome 154. Workers can now construct various CSS Typed Object Model (Typed OM) objects directly, expanding the ability to manipulate styles in background scripts. Font handling is enriched with a FontFace.width property and a corresponding font-width descriptor for @font-face, both acting as aliases for the existing stretch and font-stretch attributes.
The “light dismiss” behavior for popovers and dialogs has been tuned so that scrolling on touch screens or right‑click actions no longer close the overlay unintentionally. On the JavaScript side, Iterator.prototype.includes() is introduced, mirroring the familiar Array.prototype.includes() semantics for iterator objects. The WebSocket constructor now accepts a second argument – a WebSocketInit options object – paving the way for future extensions. One of the new options, targetAddressSpace, lets developers specify whether the connection should target a “local” or “loopback” address space, which is useful for communicating with local servers that lack HTTPS support.
Additional updates include a stricter CORS check for the Background Fetch API, a new error condition for Secure Payment Confirmation when a language tag does not match the dialog language, and the introduction of a “Window Shape API” for Isolated Web Apps on ChromeOS allow‑listed devices. The latter enables developers to define non‑rectangular windows or windows composed of multiple separate regions, opening possibilities for widgets and floating panels.
Although the release notes list support for the CSS text-decoration-inset property, ChromeStatus indicates that its activation has been delayed until Chrome 156.
Chrome 154 also launches several experimental features under origin trials. “Private Verification Tokens (PVT)” are being tested to allow trust signals gathered during normal browsing to be carried into incognito sessions, with the goal of reducing repetitive challenges such as CAPTCHAs while preserving privacy.
Beyond the core browser, Google is enhancing cross‑device continuity. According to reporting by The Verge, the existing “send tab” feature now remembers scroll position, so users who switch from mobile to desktop (or vice versa) resume reading at the exact spot they left off. Form entries that have not yet been submitted are also retained across devices, helping users continue lengthy tasks without losing progress.
The Gemini AI assistant, integrated into Chrome, receives new study‑support capabilities. It can now analyze, visualize, and summarize a broader range of media, including podcasts and videos hosted outside of YouTube. After playing an audio or video file, users may ask Gemini to extract key points, locate specific information, or clarify confusing sections. Additionally, Gemini can generate interactive quizzes based on the content of open tabs. The quiz feature is rolling out in English for desktop users in the United States and India, with plans to expand to other regions and to mobile platforms in the coming months.
The next stable version, Chrome 155, is slated for release on October 6, 2026, local time. Meanwhile, Google’s broader ecosystem continues to evolve, with services such as BigGo Finance positioned to appear first in Google Search Top Stories, promising users immediate access to comprehensive financial news.
Be First to Comment