Updates / Microsoft Edge

Edge 157: Chromium 157, HTTPS-First kept off on cdpfleet, Protected Audience gone

Stable Edge on the fleet is now 157.0.4341.42, on Chromium 157: HTML streaming, Protected Audience gone, HTTPS-First kept off on cdpfleet, TLS unchanged.

Microsoft Edge stable · 156.0.4314.58 → 157.0.4341.42 · 2026-11-08

Microsoft released Edge 157 to stable on 2026-11-05, and new edge sessions on the fleet now run 157.0.4341.42 instead of 156.0.4314.58. The measured Chromium base moves from 156.0.8078.80 to 157.0.8103.39, so web platform changes follow Chrome 157 (Chrome 157 post). Pin the previous major with "version" if you need it.

New

Chromium 157.0.8103.39, as the browser reports in its full-version client hints.
CSS text-decoration-inset: sets how far underlines, overlines and line-throughs are inset from, or extend beyond, the edges of the text (Edge 157 web platform release notes). Our feature probe finds it on 157 and not on 156.
HTML streaming and positional methods: streamAppendHTML() and its siblings return a WritableStream that parses HTML as you write it, and positional methods (beforeHTML(), afterHTML(), appendHTML(), prependHTML(), replaceWithHTML() and their …Unsafe variants) effectively replace insertAdjacentHTML() (web platform release notes). Our probe finds Element.prototype.streamAppendHTML on 157 and not on 156.
WebTransport.reliability and the canvas srgb-linear colour space: both appear in our probe on 157 and not on 156, as they did in Chrome 157, though neither is in Microsoft's 157 notes. Chrome Platform Status lists the WebTransport reliability attributes for 158 and the linear canvas colour spaces for 155.
Also in the web platform release notes: a custom string for text-overflow (for example " (more)"), position-visibility: anchor-valid and the singular anchor-visible (the plural anchors-visible is now a deprecated alias), an icon-only displaymode for the <camera>, <microphone> and <geolocation> elements, a javascriptURLs option in the Sanitizer API, HTML-in-canvas, style and layout durations in Long Animation Frames, ProgressEvent in service workers, BluetoothRemoteGATTServer as an EventTarget, and the atomic-vec2u-min-max WebGPU feature. Origin trials include WebMCP and Connection Allowlist Embedded Enforcement.
CSS corner shorthands (corner, corner-top-left and the rest) are listed in the Edge 157 notes (Chrome Platform Status has since moved them to Chromium 160), but our probe ('corner' in document.documentElement.style) doesn't find corner on 157.0.4341.42, the same as on Chrome 157. Feature-test before you use them.
Edge's own changes, per Microsoft's release notes: sign-in with an Apple account, an upgraded Copilot new tab page and side pane, memory information in tab hover cards, the fading-tabs experience removed, and the legacy direct-WAM sign-in on Windows retired. New policies include ComponentUpdatesMode and AllHttpAuthSchemesAllowedForProxies; BackForwardCacheForWebSocketsAllowed is deprecated.

Removed or changed

Protected Audience is gone: navigator.joinAdInterestGroup exists on 156 and not on 157, as in Chrome 157. Chrome announced it would deprecate and remove the Protected Audience API (Chrome Platform Status); Microsoft's 157 notes don't list the removal. Our probes still find the Topics API (document.browsingTopics) and fenced frames on 157.
HTTPS-First stays off on cdpfleet: Chromium 157 turns on HTTPS-First balanced mode, which upgrades http:// URLs to https:// or blocks sites without HTTPS (Chrome 157 post); Microsoft's notes don't mention it. Our Edge beta 157 measurements show it: on 157.0.4341.10 (2026-10-22) and 157.0.4341.30 (2026-11-01), http://ip-api.com/json/?fields=status ended at https://ip-api.com/json/?fields=status with a 403, 157.0.4341.24 (2026-10-30) failed with net::ERR_BLOCKED_BY_CLIENT, while Edge dev 157 builds from mid-October and stable 156 still loaded it over HTTP. Since 2026-11-06 (09:34 UTC) every node turns the mode off by enterprise policy for Chrome, Chromium, Brave and Edge. Edge stable 157.0.4341.42, measured on 2026-11-08, loaded the same URL over plain HTTP: status 200, {"status":"success"}, no warning page.
Background Fetch enforces CORS: Background Fetch requests now go through the same security checks as a regular fetch() (web platform release notes).
XSLT, still on in Stable: Microsoft repeats that browser-native XSLT (XSLTProcessor and XSLT processing instructions in XML) is off by default in Canary, Dev and Beta from 157 and goes off in Stable with Edge 159. The XSLTEnabled policy and the deprecation origin trial keep it on until Edge 176.

What sites see / detection

User agent and client hints: Chrome/157.0.0.0 … Edg/157.0.0.0 in the user agent, and the Sec-CH-UA brands change from Not:A-Brand 8, Chromium 156, Microsoft Edge 156 to Not-A.Brand 99, Microsoft Edge 157, Chromium 157: a new placeholder brand, and Microsoft Edge now comes before Chromium. An allowlist that matches the exact brand string needs updating.
TLS and HTTP/2 unchanged: the JA4 hash, the peetprint hash, the HTTP/2 fingerprint, the header order and the cipher and extension counts are identical to 156.
Page fingerprint unchanged: WebGL, the canvas hash, plugins, the PDF viewer, languages, navigator.webdriver, window.chrome and the screen values read the same as on 156.
Bot checks unchanged: bot.sannysoft.com flagged one check (WebGL Renderer) before and after.

For scraping

Launch options, the Playwright 1.60 client and wsUrl are the same, and every Playwright feature we test still works.
Plain-HTTP URLs need no change on cdpfleet: HTTPS-First is switched off on every node. Your own Edge 157 elsewhere upgrades or blocks them unless the same policies are set, as Edge beta 157 did on the fleet before the policy (we didn't measure stable 157 without it).
If you match Sec-CH-UA brand strings or the full user agent somewhere (an allowlist, a test), update them to 157.
If a target page renders XML with an XSLT stylesheet in the browser, plan for Edge 159: transform it yourself, or read the raw XML.

Measured on the fleet

The same probe ran against 156.0.4314.58 and 157.0.4341.42 on the fleet, each when it went live: identity, TLS and HTTP/2 fingerprint, web platform features, Playwright features and bot checks. Host-dependent values (cores, memory, timings) are left out.

What the site sees: identity

	Before	After
User agent	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36 Edg/156.0.0.0	Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/157.0.0.0 Safari/537.36 Edg/157.0.0.0
Client hint brands	Not:A-Brand 8, Chromium 156, Microsoft Edge 156	Not-A.Brand 99, Microsoft Edge 157, Chromium 157
Client hint full versions	Not:A-Brand 8.0.0.0, Chromium 156.0.8078.80, Microsoft Edge 156.0.4314.58	Not-A.Brand 99.0.0.0, Microsoft Edge 157.0.4341.42, Chromium 157.0.8103.39

Web platform features added

CSS text-decoration-inset (Chrome 157)
Element.streamAppendHTML (Chrome 157)
WebTransport.reliability (on stable from Chrome 157; listed for 158)
Canvas srgb-linear colour space (on stable from Chrome 157)

Web platform features removed

Protected Audience (navigator.joinAdInterestGroup)

Raw diff

{
  "engine": "edge",
  "label": "stable",
  "from": "156.0.4314.58",
  "to": "157.0.4341.42",
  "browser_version": {
    "before": "156.0.4314.58",
    "after": "157.0.4341.42"
  },
  "changes": {
    "identity": [
      {
        "field": "user_agent",
        "before": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36 Edg/156.0.0.0",
        "after": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/157.0.0.0 Safari/537.36 Edg/157.0.0.0"
      },
      {
        "field": "client_hint_brands",
        "before": "Not:A-Brand 8, Chromium 156, Microsoft Edge 156",
        "after": "Not-A.Brand 99, Microsoft Edge 157, Chromium 157"
      },
      {
        "field": "client_hint_full_versions",
        "before": "Not:A-Brand 8.0.0.0, Chromium 156.0.8078.80, Microsoft Edge 156.0.4314.58",
        "after": "Not-A.Brand 99.0.0.0, Microsoft Edge 157.0.4341.42, Chromium 157.0.8103.39"
      }
    ],
    "network": [],
    "features": {
      "added": [
        {
          "key": "css_text_decoration_inset",
          "label": "CSS `text-decoration-inset` (Chrome 157)"
        },
        {
          "key": "stream_append_html",
          "label": "`Element.streamAppendHTML` (Chrome 157)"
        },
        {
          "key": "webtransport_reliability",
          "label": "`WebTransport.reliability` (on stable from Chrome 157; listed for 158)"
        },
        {
          "key": "canvas_srgb_linear",
          "label": "Canvas `srgb-linear` colour space (on stable from Chrome 157)"
        }
      ],
      "removed": [
        {
          "key": "protected_audience",
          "label": "Protected Audience (`navigator.joinAdInterestGroup`)"
        }
      ]
    },
    "playwright": {
      "broke": [],
      "fixed": []
    },
    "fingerprint": [],
    "bot_checks": {
      "newly_failed": [],
      "newly_passed": [],
      "failed_before": 1,
      "failed_after": 1
    },
    "plain_http": [],
    "launch": {
      "before_ms": 545,
      "after_ms": 551
    }
  },
  "host_dependent_ignored": [
    "hardware_concurrency",
    "device_memory",
    "launch/connect/page timings"
  ]
}