Update to CEF 85.2.11

[salvadordf]

Hi,

CEF4Delphi is now updated to CEF 85.2.11.

This is what's new :

• Chromium 85.0.4183.83
• Added a new experimental property : GlobalCEFApp.ChromeRuntime. Read this for more info : https://bitbucket.org/chromiumembedded/ ... -callbacks
• Removed GlobalCEFApp.OnRenderProcessThreadCreated event.
• Removed GlobalCEFApp.OnRenderThreadCreated event.
• Removed ICefMediaSink.IsValid.
• Removed ICefMediaSource.IsValid.

These are the CEF binaries :

• 32 bits -> http://opensource.spotify.com/cefbuilds ... 32.tar.bz2
• 64 bits -> http://opensource.spotify.com/cefbuilds ... 64.tar.bz2

[thefunkyjoint]

It seems this update has a bug.

When i try to navigate to https://messages.google.com/web , it won't show the QR Code to connect anymore.

After i downgraded to the previous CEF4Delphi version, it worked again.

If you navigate to this page using Chrome, it will work too. The issue seems to be related to this specific CEF4delphi version.

Here is a screenshot : https://ibb.co/HK55qwj

Any ideas ?

[salvadordf]

I tested that page with the official CEF sample application and it has the same issue.

I still need to investigate more but this seems to be a CEF issue.

[salvadordf]

I just posted about this on the official CEF forum :
https://magpcss.org/ceforum/viewtopic.php?f=6&t=17826

[thefunkyjoint]

Nice, thank you Salvador. I'll be looking forward to fix this issue ; for the time being i'll be using the previous version.

[salvadordf]

I added an issue in the CEF project :
https://bitbucket.org/chromiumembedded/ ... -fail-with

The CEF project manager provided a workaround!

Add this line before the GlobalCEFApp.StartMainProcess call in the DPR file :

Code: Select all

GlobalCEFApp.DisableFeatures := 'OutOfBlinkCors';

[thefunkyjoint]

Indeed this fixed the issue !

What exactly this configuration does ? Should i keep it in future updates ?

Thank you !

[salvadordf]

I guess it's only a temporary workaround.

This stackoverflow has more information about that feature and it comes directly from a Chromium developer :
https://stackoverflow.com/a/62590759

I'm Takashi from Chromium Project, and drove the Out-Of-Blink/Render CORS project.

The project intended to introduce a process isolated CORS implementation for better security and privacy, and many of new network related features rely on this new implementation. Unfortunately we temporarily disabled preflight support in DevTools as it turned out continuing to support it weakens security and privacy. Sorry for inconvenience during this period.

Good news is now Chrome 83 implements the CORS preflight DevTools support again in a security preserved way. So you can monitor the CORS preflight requests as you could do before the Out-Of-Blink/Renderer CORS.

Best,

[dilfich]

GlobalCEFApp.DisableWebSecurity:= True;
Also work.