Chrome 59 To Support Headless Mode

[phoronix]

Phoronix: Chrome 59 To Support Headless Mode

Chrome 59 stable isn't expected until early June, but when this release comes it will bring with it an interesting feature: a headless mode...

http://www.phoronix.com/scan.php?page=news_item&px=Chrome-59-Headless

[ElectricPrism]

What possible security issues could this introduce if malicious code could run the browser like a daemon. Or is that even practical to do so, It just seems like it could be concerning.

[ldo17]

What possible security issues could this introduce if malicious code could run the browser like a daemon.

You mean they can’t already?

[Emdek]

@ElectricPrism, such solutions exists for years, since it's nothing special.
For example PhantomJS.

[microcode]

What possible security issues could this introduce if malicious code could run the browser like a daemon. Or is that even practical to do so, It just seems like it could be concerning.

This doesn't concern that. It requires starting the chromium process with different flags, which is not something generally a subprocess of chromium can do, and it's not something exposed to websites.

[sarfarazahmad]

@ElectricPrism, such solutions exists for years, since it's nothing special.
For example PhantomJS.

how secure is phantomjs to Chromium/Firefox ? This makes phantomJS obsolete ?

[Chewi]

Not just PhantomJS but also QtWebKit, which we've used at work for years. There's also Selenium on the Firefox side.

[Vistaus]

Not just PhantomJS but also QtWebKit, which we've used at work for years. There's also Selenium on the Firefox side.

However, QtWebKit is deprecated and superseded by QtWebEngine.

[Chewi]

However, QtWebKit is deprecated and superseded by QtWebEngine.

True but Capybara isn't going to support that. They're looking to CEF instead.

[uid313]

More interestingly Chrome 58 is rumored to be switching over from GTK2 to GTK3.