Chrome 141 update has been officially released with new upgrades and optimizations. This update is for the Android, ChromeOS, Linux, macOS, and Windows developers.
Chrome 141 is rolling out now → https://t.co/nMJdtLBwvj
This release includes the getAllRecords() method for IndexedDB, WebRTC Encoded Transform V2, support for nested SVG width and height attributes, and more. pic.twitter.com/WeblYiL6ju
— Chrome for Developers (@ChromiumDev) October 2, 2025
Chrome 141 Update
CSS
Custom property enumeration in getComputedStyle()
When iterating over window.getComputedStyle(element) in Chrome, there was a bug where it forgot to include any custom properties set on the element. Therefore, length() on the returned object forgets to account for the number of custom properties set. This bug is fixed in Chrome 141, aligning Chrome with Firefox and Safari.
DOM
ARIA Notify API
ariaNotify provides a JavaScript API that lets content authors tell a screen reader what to read.
ariaNotify improves reliability and developer control compared to ARIA live regions, allowing for announcing changes not tied to DOM updates. This enables more consistent and ergonomic accessibility experiences across dynamic web applications. Iframe usage of this feature can be controlled using the “aria-notify” permission policy.
Update hidden= until-found and details ancestor-revealing algorithm
The specification recently had some small changes to the revealing algorithms for hidden=until-found and details elements to prevent the browser from getting stuck in an infinite loop; these are now shipping in Chrome.
JavaScript
Align implementations on when RTP stats should be created
RTP stats objects, of type “outbound-rtp” or “inbound-rtp” in this case, represent a WebRTC stream. The identifier of this stream is the SSRC (a number). This feature aligns with the specification on when these stats should be created.
Media
Support restrictOwnAudio
The restrictOwnAudio property is a captured display surface constrainable property. It changes the behavior of system audio in a captured display surface. The restrictOwnAudio constraint only has an effect if the captured display surface inherently includes system audio; otherwise, it will have no impact.
windowAudio for getDisplay Media ()
Extends DisplayMediaStreamOptions for getDisplayMedia() with a windowAudio option. This new option allows web applications to hint to the user agent whether the user should be offered the ability to share audio when a window is selected. windowAudio can be set to exclude, system, or window based on application preference.
A web application that is configured for audio capture but wants to limit system audio capture when a window is selected should set windowAudio: “exclude”.
Miscellaneous
Support width and height as presentation attributes on nested <svg> elements
This feature supports applying width and height as presentation attributes on nested <svg> elements through both SVG markup and CSS. This dual approach provides even greater flexibility for developers, allowing them to manage and style SVG elements more efficiently within complex designs.
Digital Credentials API (presentation support)
Websites retrieve credentials from mobile wallet apps using a variety of mechanisms, such as custom URL handlers and QR code scanning. This feature lets sites request identity information from wallets using Android’s IdentityCredential CredMan system. It is extensible to support multiple credential formats (such as ISO mDoc and W3C verifiable credentials) and allows multiple wallet apps to be used. This update adds mechanisms to help reduce the risk of ecosystem-scale abuse of real-world identity.
Navigation API: deferred commit (precommit handlers)
Normally, when navigateEvent.intercept() is called, the intercepted navigation commits (and therefore the URL updates) as soon as the NavigateEvent finishes dispatch.
This feature adds a precommitHandler option to navigateEvent.intercept(), similar to handler. It defers the commit until that handler (and all other precommit handlers) are resolved, and it allows the handler to change the navigation’s URL, info, status, and history handling behavior (push/replace).
FedCM: Alternative fields in account selection
Adds support for phone numbers and usernames, in addition to or instead of a user’s full name and email address as identifiers for disambiguating accounts in the account selector. Also, makes these new fields available for websites to affect the disclosure text.
Network / Connectivity
No-Vary-Search support for the HTTP disk cache
Lets the HTTP disk cache use the No-Vary-Search response header to share a cache entry between URLs that differ only in the query parameters.
Developers can use No-Vary-Search to specify query parameters that have no impact on the user experience. A common example might be an ID used to track conversions. Supporting this header in the HTTP disk cache means that if the user later goes back to that same page without the conversion ID, it can be used or revalidated from the cache rather than having to be fetched from scratch from the network.
Previously, No-Vary-Search support shipped for the navigation prefetch cache, prefetch, and prerender speculation rules, and prerender. This launch makes it generally available to any feature that uses the HTTP disk cache.
Offline / Storage
IndexedDB getAllRecords() and direction option for getAll() and getAllKeys()
This feature adds the getAllRecords() method to the IndexedDB IDBObjectStore and IDBIndex. It also adds a direction parameter to getAll() and getAllKeys(). This functionality lets certain read patterns be significantly faster when compared to the existing alternative of iteration with cursors. In one test, a workload from a Microsoft property showed a 350ms improvement.
The getAllRecords() method combines getAllKeys() and getAll() by enumerating both primary keys and values at the same time. For an IDBIndex, getAllRecords() also provides the record’s index key in addition to the primary key and value.
Performance
Speculation rules: desktop “eager” eagerness improvements
On desktop, “eager” eagerness speculation rules prefetches and prerenders now trigger when users hover on a link for a shorter time than the “moderate” mouse hover time.
Security
Strict Same Origin Policy for Storage Access API
Adjusts the Storage Access API semantics to strictly follow the Same Origin Policy with regard to security. That is, using document.requestStorageAccess() in a frame only attaches cookies to requests to the iframe’s origin (not site) by default.
Signature-based integrity
This feature provides web developers with a mechanism to verify the provenance of resources they depend upon, creating a technical foundation for trust in a site’s dependencies. In short, servers can sign responses with an Ed25519 key pair, and web developers can require the user agent to verify the signature using a specific public key.
WebRTC
WebRTC Encoded Transform (V2)
This API allows the processing of encoded media flowing through an RTCPeerConnection. Chrome shipped an early version of this API in 2020. Since then, the specification has changed, and other browsers have shipped the updated version (Safari in 2022 and Firefox in 2023). This launch aligns Chrome with the updated specification as part of Interop 2025.
echoCancellationMode for getUserMedia()
Extends the echoCancellation behavior of the MediaTrackConstraints dictionary. His previously accepted true or false and now additionally accepts the values “all” and “remote-only”. This lets clients modify echo cancellation behavior applied to audio tracks received from microphones, controlling how much of the user system playout (all, or only audio received from PeerConnections) is removed from the microphone signal.
Managed ChromeOS only
Permissions Policy for Device Attributes API
The new Permissions Policy enables restricting access to the Device Attributes API, which is available only for policy-installed kiosk web apps and policy-installed Isolated Web Apps, both only on managed ChromeOS devices.
Additionally, the feature is controlled by content settings. Two new policies are introduced: DeviceAttributesBlockedForOrigins and DefaultDeviceAttributesSetting, to complement previously introduced DeviceAttributesAllowedForOrigins. The feature is enabled by default for policy-installed kiosk web apps and policy-installed Isolated Web Apps on managed ChromeOS devices.
Origin trials
Local network access restrictions
Chrome 141 restricts the ability to make requests to the user’s local network, gated behind a permission prompt.
Proofreader API
A JavaScript API for proofreading input text with suggested corrections, backed by an AI language model.
Extend CSP script-src (also known as script-src-v2)
This feature adds new keywords to the script-src Content Security Policy (CSP) directive. This adds two new hash-based allowlisting mechanisms: script sources based on hashes of URLs and contents of eval() and eval()-like functions. This is sometimes referred to as script-src-v2, although it is backward compatible with the existing script-src and uses the same directive.
WebAssembly custom developers
Lets WebAssembly store data associated with source-level types more efficiently in new “custom descriptor” objects. These custom descriptors can be configured with prototypes for the WebAssembly objects of that source-level type. This lets you install methods on a WebAssembly object’s prototype chain and call them directly from JavaScript using normal method call syntax. The prototypes and methods can be configured declaratively using an imported built-in function.
Depreciations and removals
Now that prefetches and prerenders are using the Sec-Purpose header for prefetches and prerenders, Chrome will move to remove the legacy Purpose: prefetch header that is still currently passed. This will be behind a feature flag/ kill switch to prevent compatibility issues.
