demo · v144

TLS Inspector

Type a URL and probe — the page reads the browser-visible TLS info via Resource Timing, and shows what the Controlled-Frame securityInfo payload would look like. The latter is only populated inside an IWA.

chrome.webRequest with securityInfo is only available inside an Isolated Web App's Controlled-Frame. Outside an IWA the demo runs a fetch + Resource Timing read and renders a simulated securityInfo blob so you can see the shape.

Controlled-Frame webRequest: checking…

resource timing


      

      

        
simulated securityInfo

        

      

    

  


  

    
the API


chrome.webRequest.onCompleted.addListener(
  (d) => console.log(d.securityInfo),
  { urls: ["<all_urls>"] },
  ["responseHeaders", "securityInfo"]
);
// Chrome 144: securityInfo (subject, issuer, fingerprints, cipher suite, SCTs)
// surfaces to Controlled-Frame webRequest listeners.

  


  

    
see also