Microsoft has started 2017 by rolling out Windows 10 builds 15002 and 15007 to end users, giving developers a new UWP architecture for Edge’s multi-process model, click-to-run Flash content and updated support for WebVR.
EdgeHTML, Microsoft’s HTML rendering engine, includes a number of updates with the 15002 release. Most notable among them is support for Content Security Policy 2.0. The specification helps developers create a whitelist of sources of trusted content, and only allows the browser to execute or render resources from the trusted sources.
CSP 2.0 diverges from the original level in several important ways, including workers having their own policy, as distinct from the protected resource that loaded them, and controlling a protected resource’s ability to load Workers via child-src rather than script-src .
The release also includes added support for WebVR APIs by default. The experimental JavaScript API provides access to Virtual Reality devices, such as the Oculus Rift, Samsung Gear VR, or Google Cardboard from the browser. Work to complete support for the WebVR APIs continues in the 15007 build.
Other updates include enabling the independent rendering of HTML5 video elements by default, as well as enabing Media over Fetch and XHR over Fetch by default.
