Ladybird Browser July Update

Summary

Hello friends! July is done. We merged 319 pull requests from 47 contributors. Ladybird is entirely funded by the generous support of companies and individuals who believe in the open web. This month, we’re excited to welcome the following new sponsors: We’re incredibly grateful for their support. If you’re interested in sponsoring the project, please contact us. Web Platform Tests (WPT) As usual, we’ve made some progress on the Web Platform Tests. We’ve added 13,090 passing tests for a new total of 1,831,856. Google reCAPTCHA passing There was a long-standing issue with our postMessage implementation: if the serialized type had not previously been used in the destination realm, we would fail to reconstruct it. The realm didn’t recognize the type and rejected the message. This is now fixed, allowing Google reCAPTCHA to pass! Unfortunately, this only works on https://www.google.com/ for now, due to a separate unresolved same-origin policy issue. High refresh rate support We now detect the refresh rate of the active screen to determine how often web content should be rendered. Previously, rendering was fixed at 60 frames per second. Websites using requestAnimationFrame now render at up to 120Hz on supported hardware. This change also improves the smoothness of scrolling, animations, transitions, and more. HTTP/3 support HTTP/3 support was recently added in curl 8.14.0 for users of OpenSSL and ngtcp2. Since Ladybird uses the OpenSSL backend with libcurl, this enabled us to support HTTP/3 as well. We now negotiate HTTP/3 for servers that advertise it via the Alt-Svc header. We also found and reported an issue in curl where Alt-Svc: clear was parsed incorrectly. This has since been fixed in curl 8.15.0. Trusted Types Trusted Types is a security feature that helps prevent cross-site scripting (XSS) by locking down injection sinks like Element.innerHTML, HTMLScriptElement.text, and HTMLScriptElement.src. It allows web developers to define policies that control how sanitize...