New Update Microsoft Edge Developers build info

[Gandalf_The_Grey]

Microsoft: Edge will mitigate 'unforeseen active' zero day bugs

Microsoft Edge has added a new feature to the Beta channel that will mitigate future in-the-wild exploitation of unknown zero-day vulnerabilities.

The new capability is part of a new browsing mode designed to focus on the Microsoft Edge's security while navigating the web.

"This feature is a huge step forward because it lets us mitigate unforeseen active zero days (based on historical trends)," Microsoft explains.

"When turned on, this feature brings Hardware-enforced Stack Protection, Arbitrary Code Guard (ACG), and Content Flow Guard (CFG) as supporting security mitigations to increase users' security on the web."

Microsoft has included this extra layer of protection against zero-day bugs exploited in the wild with the release of version 98.0.1108.23 to the Microsoft Edge Beta Channel.

To help protect end-users from zero-day exploits, administrators can apply the EnhanceSecurityMode, EnhanceSecurityModeBypassListDomains, EnhanceSecurityModeEnforceListDomains to Windows, macOS, and Linux desktops.

"These policies also make that important sites and line of business applications continue to work as expected," Microsoft added

Microsoft: Edge will mitigate 'unforeseen active' zero day bugs

Microsoft Edge has added a new feature to the Beta channel that will be able to mitigate future in-the-wild exploitation of unknown zero-day vulnerabilities.

www.bleepingcomputer.com

 

[Andy Ful]

Nice.

 

[wat0114]

If this feature works as advertised, it raises the security bar for other browsers.

 

[Andy Ful]

If this feature works as advertised, it raises the security bar for other browsers.

I am afraid, that applying all these features can block some extensions and some websites. We will see.

 

[Gandalf_The_Grey]

I am afraid, that applying all these features can block some extensions and some websites. We will see.

= ultimate security

 

[oldschool]

I am afraid, that applying all these features can block some extensions and some websites. We will see.

I did a test by applying ACG to Edge Exploit Protection and got a white screen on re-start.

 

[Andy Ful]

I did a test by applying ACG to Edge Exploit Protection and got a white screen on re-start.

There can be several reasons for that (3rd party extension, 3rd party code injection, etc.).

 

[Gandalf_The_Grey]

Top Feedback Summary for December

Hello there, Insiders! We hope you were able to have a relaxing transition into the new year, and we’re looking forward to the year ahead. We worked on a couple things while we took a break in our communications over the holidays, so let’s jump into what changes we made in December.

This month, we are marking Restore tabs if Edge or the OS is restarted for any reason as Addressed! The team has done a lot of work around this experience and believe the majority of issues that were reported by you Insiders have been addressed. We do understand that sometimes bugs can happen! If you see any issues with your tabs restoring after Edge or your operating system shuts down, we encourage you to submit a bug report directly through the in-app browser feedback tool. Head to the … menu > Help and feedback > Send feedback and detail what happened as well as including diagnostics so that the team can investigate. The team will be able to dig further into the situation after that, and if you include your email address it will enable us to update you as we take action on your feedback.

We are moving Users can move Vertical Tabs to the right side of the screen from Under Review to Planned this month! We don’t have any specifics that we are sharing with this update, but know that the team is looking at the different ways this can be done. We will share more once we understand these options!

That is it for this month’s update! We will be back in February with what’s changed in January on your top feedback requests. Did you know we have a new portal in which you can submit feedback on what changes you want to see? You can search to see if your idea is already on the Edge Feedback portal, or post it up to get other likeminded people to comment and vote on your suggestion. Have something you think might be more of a bug? Send it to us directly through the in-app feedback tool by heading to the … menu > Help and feedback > Send feedback and include diagnostics. Detailing exactly what you see will ensure that the team understands the issue at hand, and if you include your email address it offers you the ability to receive email updates whenever we take action on your item.

Until next update, Insiders. Happy browsing!

Top Feedback Summary for December

Hello there, Insiders! We hope you were able to have a relaxing transition into the new year, and we’re looking forward to the year ahead. We worked on a..

techcommunity.microsoft.com

 

[Gandalf_The_Grey]

Dev channel update to 99.0.1135.5 is live

Hello Insiders! Today we’re releasing build 99.0.1135.5 to the Dev channel, and since it’s only a few builds ahead from last week, there’s not as much to talk about. We do, however, have a wonderful retrospective of all the work we did in 2021 for web developers. You can read it here: https://blogs.windows.com/msedgedev/2022/01/19/looking-back-at-microsoft-edge-for-developers-in-2021.... As for everything that’s new and noteworthy this week:

Added features:

• Added the ability to use Web Capture in PDFs.
• Added address bar dropdown content when first clicking on the address bar like Edge Legacy had.
• Added the ability to change the units that the air temperature is shown in on mobile’s new tab page.
• Enabled support for Data Loss Prevention on websites by default.
• Un-deprecated the management policy to control if the Win Http Proxy Resolver is Enabled, which will be re-deprecated at a later time.
• Added a management policy to Allow the Games Menu (note that updates to documentation and administrative templates may not have happened yet).
• Added an experimental WebView2 API for Clearing Browsing Data (Issue 140).

As always, we couldn’t do this without all your fantastic feedback and ideas!

Dev channel update to 99.0.1135.5 is live

Hello Insiders! Today we’re releasing build 99.0.1135.5 to the Dev channel, and since it’s only a few builds ahead from last week, there’s not as much to talk..

techcommunity.microsoft.com

 

[ForgottenSeer 92963]

Re post #501 So Super-duper mode is going to be enabled by default?

When super-duper mode was introduced, I could also enable ACG through MD Exploit Protection, but some websites did not load. I provided feedback to M$ and got an answer that they would provide usability enhancements and like Code Integrity Guard (and upcoming AppContainer sandbox) for renderer process it probably would not require user action (meaning manually enabling it in MD Exploit Protection).

At my wife's work (a company servicing a critical back bone infrastructure in the NL), they have announced that they will be switching from Chome to Edge on corporate laptops last week of this quarters (because of security reasons). All these security enhancements compared to Chrome (de-elavate on start, CIG, AppContainer, Super-duper mode and now ACG) are probably part of a campaign to win back marketshare in the corporate market.

I think it will pay off, when employees are told to use Edge in stead of Chrome by company admins, because it is safer (they might start using Edge on their personal devices to). My wife complained about the upcoming change and asked me this morning which browser she was using on her personal laptop. She did not know she was already using Edge privately. Funny how her initial response to change because of IT-stuff was not positive, until she heard that she was already using it.

On the other hand, Chrome will follow as soon as they start noticing that they are losing ground. As example Chrome 97 was compiled with Flow Control Guard enabled (don't remember exactly but I thought Edge chromium had it enabled in V93).

 

[silversurfer]

Microsoft tests a new quick actions sidebar in Edge​

Some Microsoft Edge Canary users are seeing a new quick actions sidebar on the right side of the web browser. It appears that Microsoft is A-B testing the functionality at the time; there is no option to enable it if it is not enabled by default.

source: Benjamin MathisThe quick actions sidebar is a small bar that is attached to the right side of the Edge web browser. Twitter user Benjamin Mathis was one of the first users that mentioned it on the site. Mathis published several screenshots of the feature on his Twitter account.

Mathis' version of the quick actions sidebar displayed five icons at the top, which opened the following features in a sidebar on the right side:

• Discover -- display site information.
• Microsoft Rewards Daily Activity
• Internet Speed Test -- a basic speed test that benchmarks the upload and download speed, and the ping.
• Games -- MSN games
• Microsoft 365 Quick Actions -- quick actions to launch Microsoft 365 apps and features.

Microsoft tests a new quick actions sidebar in Edge - gHacks Tech News

Some Microsoft Edge Canary users are seeing a new quick actions sidebar on the right side of the web browser.

www.ghacks.net

 

[ForgottenSeer 92963]

Microsoft tests a new quick actions sidebar in Edge​

Microsoft tests a new quick actions sidebar in Edge - gHacks Tech News

Some Microsoft Edge Canary users are seeing a new quick actions sidebar on the right side of the web browser.

www.ghacks.net

Oh no another feature I won't be using on Microsoft Edge bing bling bloat

 

[oldschool]

Oh no another feature I won't be using on Microsoft Edge bing bling bloat

Starting to look like Vivaldi: full of visual garbage. If this comes to stable, I'm going back to Brave where its bloat is hidden and may be disabled.

 

[CyberTech]

Starting to look like Vivaldi: full of visual garbage. If this comes to stable, I'm going back to Brave where its bloat is hidden and may be disabled.

Firefox thought you were the on way ah never mind..

 

[amirr]

Starting to look like Vivaldi: full of visual garbage. If this comes to stable, I'm going back to Brave where its bloat is hidden and may be disabled.

I agree with you. I like Google Chrome a lot. Because of its simplicity. I hope it remains like this for years to come.

 

[silversurfer]

How to disable Microsoft Edge’s Find on page related matches

Microsoft is aiming to improve Find on-page search experience to ensure you get what you are looking for by including related matches in the Find on-page in the Microsoft Edge browser. Here is how you can disable or turn it off in Edge if you find it intrusive or not useful. Microsoft Edge’s...

techdows.com

How to disable Visual Search in Microsoft Edge

Microsoft today quietly added Bing‘s Visual Search feature for images to Microsoft Edge 99 Canary version. With this, the Visual Search context menu option and icon/button appear when you right-click or hover over an image. Visual Search in Micorsoft Edge Microsoft Edge comes with a unique...

techdows.com

 

[silversurfer]

Note: Article mentioned new features are available on Android version of Edge Canary only for now...

Microsoft Edge Android soon may get these cool new features

After the recent Edge 97 Android release, Microsoft is testing a bunch of new features. For instance, Microsoft Edge for Android may get News Notifications, an option to show desktop site by default, Read aloud in the background, a New tab page optimized for news, and more. News Notifications...

techdows.com

 

[Gandalf_The_Grey]

Dev channel update to 99.0.1150.2 is live

Hello Insiders! Today we’re releasing build 99.0.1150.2 to the Dev channel, and as I mentioned last week, this is the final build for version 99, give or take a patch or two. We’re also excited to announce that Selenium’s Internet Explorer Driver now works with IE mode; you can read all about it here: https://blogs.windows.com/msedgedev/2022/02/01/test-ie-mode-in-microsoft-edge-internet-explorer-driv.... As for all the new and exciting product changes this week:

Added features:

• Added a Setting to control the related matches feature in Find on Page.
• Enabled support for Password Monitor on iOS.
• Enabled support for Shopping on Android.
• Developer:
  • Added an experimental WebView2 API for showing a status bar (Issue 844).
  • Added experimental support for the CDP API for WebView2 apps to use sessionId, as discussed at https://github.com/MicrosoftEdge /WebView2Feedback/blob /882421bf85d70d3801b82e6a339fd3a2993781d0/ s...
• Management policies (note that updates to documentation and administrative templates may not have occurred yet):
  • Added a policy to control if the Related Matches Cloud Service is Enabled, which controls the related matches feature in Find on Page.
  • Added a policy to control the Password Manager Blocklist, which is the list of sites that aren’t allowed to save or fill passwords.
  • Added a policy to control if the Hubs Sidebar is Enabled.
  • Added a policy to say Do Not Silently Block Protocols From specific Origins to the external application launcher, which lets certain protocols coming from a defined list of origins bypass protections designed to prevent a flood of application launches.
  • Enabled support for a policy from Chromium to control User Agent Reduction, which controls whether the full or the reduced version of the User Agent header is sent with web requests and whether or not experimentation is allowed to control it.

As always, since this is the end of 99, you should look for it in Beta soon!

Dev channel update to 99.0.1150.2 is live

Hello Insiders! Today we’re releasing build 99.0.1150.2 to the Dev channel, and as I mentioned last week, this is the final build for version 99, give or take..

techcommunity.microsoft.com

 

[Zorro]

I did a test by applying ACG to Edge Exploit Protection and got a white screen on re-start.

Have you tried enabling forced hardware stack protection and stack integrity checking (Stack-Pivot)?

 

[oldschool]

Have you tried enabling forced hardware stack protection and stack integrity checking (Stack-Pivot)?

I got the same result as you.