AppCache scope restricted

-

The Application Cache (AppCache) specification has been deprecated since December 2016 and in Chrome starting in version 79. In Chrome 70, AppCache was removed from insecure contexts. We plan to remove AppCache in Chrome 82. Prior to AppCache's removal in Chrome 82, we're announcing a security fix that introduces the concept of a manifest scope.

Beginning in Chrome 80 in January, 2020, the scope of the AppCache manifest will be restricted to the path it is served from. Previously, a manifest served from any location within a site's origin could override everything within that origin. For example, a manifest served from www.example.com/foo/bar/ would previously allow overriding any URLs within www.example.com. Now it will only allow overriding URLs beginning with www.example.com/foo/bar/, the scope of the manifest.

Does this affect my website?
To see if this affects your website, go to chrome://appcache-internals/ and compare the path of the manifest to the paths under File URL. Note that this change only affects "Intercept" and "Fallback" properties. (See the image below.)


You should also test your site using the command line feature flag. To do so:

  1. Launch Chrome 80 using the following command:

    google-chrome --enable-features="AppCacheManifestScopeChecks"
  2. Open chrome://appcache-internals/, find your manifest and remove it.
  3. Open your site so a new AppCache instance is created.
  4. Open chrome://appcache-internals/, verify your manifest appears as expected and parser version is set to 1.
  5. Go offline, then access your site so it's served from AppCache. Verify all pages load as expected.
Mitigations
The replacement technology for AppCache is the Cache API, which requires a service worker. For a shorter term mitigation, add the following HTTP response header to your manifest responses:


X-AppCache-Allowed: /

This header is new in Chrome 80 and will be supported until Chrome 82, which is our announced AppCache removal milestone. Please be aware that AppCache, like all Chrome features, makes use of the disk cache to fetch server responses, so any long-lived disk cache entries for a manifest must be cleared in order to pick up a server X-AppCache-Allowed header change.
Posted by jmedley
#Google #Android #Smartphones #OS #News @ndrdnws #ndrdnws #AndroidNews

Popular Posts:

Apple is postponing new iOS features in favor of reliability and performance

-
Image
Apple has decided to postpone new features in iOS in favor of improving the reliability and performance of the operating system, as according to a report by Axios. According to the report, Craig Federighi, Senior Vice President, Software Engineering, announced the revised plan to employees at a meeting earlier this month. This pushes features like refresh of the homescreen and in-car user interface, improvements to core apps like Mail and camera experience to 2019. What we will get this year is improvements to AR, digital health and parental controls. Apart from that, the OS will largely feature improvements to performance and user experience. We have seen Apple do this with macOS in the past, where they dedicate one entire update cycle to just refining the OS and make existing features work better. However, we have never quite seen Apple do that on iOS. This is largely due to the hyper competitive nature of the mobile market where competition and customer demands push companies t
Continue Reading....

Do more from your inbox with Gmail Add-ons

-
Image
For many of us, email is mission control—the prompt to generate an invoice, prepare a presentation or follow up on a sales opportunity. With so many to-dos, imagine if you could complete these tasks directly from your inbox without interrupting your workflow. We believe email can do more, which is why we're launching Gmail Add-ons, a new way to work with your favorite business apps directly in Gmail. Gmail Add-ons, built for your workflows Rather than toggling between your inbox and other apps, use add-ons to complete actions right from Gmail. With Gmail Add-ons, your inbox can contextually surface your go-to app based on messages you receive to help you get things done faster. And because add-ons work the same across web and Android, you only need to install them once to access them on all of your devices. Click the settings wheel on the top right of your inbox and then "Get add-ons" to get started. We made Gmail Add-ons available in developer p
Continue Reading....

This is Samsung’s official spec sheet for the Galaxy S8 and S8+

-
Image
The Galaxy S8 and Galaxy S8+ have finally been unveiled, and our hands-on experience with the devices is available for everyone to see. Everyone has a pretty good idea about the devices’ specifications at this point, but for those wanting to see it, we have added the official spec sheet offered by Samsung below. Remember, detailed specs are also available from our devices page . Oh, and don’t remember to take a look at what we think about Samsung’s new flagships .
Continue Reading....

Jurassic VR - Google Cardboard

-
Image
Jurassic VR - Google Cardboard Rabbit Mountain Adventure VERSION/BUILD: 1.6.4 UPDATED: 28 January 2018 REQUIRES ANDROID: 4.4 and up FILE SIZE: 66.4 M Walking with the dinosaurs! Roam the earth and experience prehistoric times in Virtual Reality. Celebrating 4+ million downloads! Have you ever wanted to meet Dinosaurs in real life? Experience the ultimate dino ride with Jurassic VR - Google Cardboard Freely roam the open environment en poke round the beautiful cedar evergreen trees to see huge dinos come to life. You can go to any point and see the sites and dinos in VR. Players get to experience the site at their own pace and the mission is simple; enjoy and discover the world of prehistoric dinosaurs before the modern world cities were built. It's like a virtual reality attraction traveling you back to prehistoric times! The ultimate experience There is no need anymore to become an archaeologist and dig the earth
Continue Reading....

DJI Mavic Air: could this be the definitive drone?

-
Image
DJI showcased its new Mavic Air drone in New York. The third quadcopter in this series is of similar quality to its predecessors and can also fold its arms for better portability. For its size, no competitor offers so much in terms of photo quality. Release date and price The DJI Mavic Air can be ordered through the official DJI website  and is also available from other retailers. The drone is available in three colors: marengo grey, white and red. We can buy the Mavic Air in a basic pack with remote control, protections, charger, cover, propeller replacement and a battery from US$799 (£769 in the UK). Often, one battery is not enough so there is a more complete pack available with three batteries, charger for four batteries and two propeller replacements from $999 (£949 in the UK). The red model reminds me of a Porsche. / © AndroidPIT Design and build quality In essence, it is th
Continue Reading....