Google Introduces Unrestricted WebUSB for Isolated Web Apps

Google to Test New Unrestricted WebUSB Feature in Chrome

Google is developing a new feature for Chrome, called "Unrestricted WebUSB," which will allow trusted isolated web apps to bypass certain security restrictions in the WebUSB API. WebUSB is a JavaScript API enabling web applications to access local USB devices. The current WebUSB specification blocks access to various device interface classes, including audio, HID, mass storage, smart card, video, and wireless controllers, as well as specific USB devices like YubiKeys and Google Titan keys used for multi-factor authentication.

The new feature will permit isolated web apps with the necessary "usb-unrestricted" permission to access these otherwise restricted devices and interfaces. Isolated web apps are packaged applications not hosted on live servers and are often used internally by companies.

Google will be testing this feature in Chrome 128, set for release in August 2024, aiming to enhance the functionality of trusted web apps in a secure environment.