June in Servo: real world compat, media queries, SharedWorker, and more

Post by GoblinSlayer » Fri, Aug 07, 2026, 9:51 AM UTC

Xirdus wrote: post #70

GoblinSlayer wrote: post #69

Earlier quoted context omitted.

FWIW C++ can do bound checks aka hardened STL. On the other hand google did riir some of their programs and removed bound checks there for speed, welcome to real world, so absence of bound checks is not a mistake, but an intended performance goal.

Google is consciously making Chrome less secure because otherwise the performance is unacceptable. The end result is about 300 CVEs every year for the last 10 years. That's for an almost 20 year old project that had most of its security issues resolved very early on. And you're saying somebody who is not Google can make a brand new browser engine from scratch in 2026, have it perform good enough to be actually usable…

Now you say security isn't that much of a problem. And rust isn't going to help.

Also modern standard compliant (without adblock) browsers don't perform anywhere good.

Post by Xirdus » Fri, Aug 07, 2026, 1:58 PM UTC

GoblinSlayer wrote: post #71

Xirdus wrote: post #70

Earlier quoted context omitted.

Google is consciously making Chrome less secure because otherwise the performance is unacceptable. The end result is about 300 CVEs every year for the last 10 years. That's for an almost 20 year old project that had most of its security issues resolved very early on. And you're saying somebody who is not Google can make a brand new browser engine from scratch in 2026, have it perform good enough to be actually usable…

Now you say security isn't that much of a problem. And rust isn't going to help. Also modern standard compliant (without adblock) browsers don't perform anywhere good.

I'm saying the opposite - security is so much of a problem that even the most popular browser in the world can't get it 100% right after 20 years of trying to get it right. Subtract popularity, subtract 20 years, subtract FAANG - do you see how abysmal the security would be in this hypothetical brand new browser engine? There would be a critical 0-day every single day for multiple years straight. People would keep getting their bank accounts hacked on regular basis. And yes, Rust isn't going to help.

Modern standard compliant doesn't mean showing ads. It means centering the div when you have tables mixed with floating mixed with grid mixed with flexbox, and all sizes are a combination of px, em, % and vw. While rendering an animated SVG. While rendering the CSS animation of that animated SVG. While recording audio. While processing that audio in a background worker. While another tab synchronizes with the current tab using local storage. And so on and so forth. There's thousands of features you need to implements and millions of possible interactions between them. And if you get any of these wrong, some website will be broken. Ignore enough features, leave enough interactions untested, and a huge chunk of the internet will be some degree of broken.

Re: June in Servo: real world compat, media queries, SharedWorker, and more

Re: June in Servo: real world compat, media queries, SharedWorker, and more