Why is Steam using Chrome 79 for its browser?

[deepfake]

Current version of the Chrome Engine is 87
Number of vulnerabilities in Chrome 79? 5 major ones

Can someone shed some light on why Steam is using a really old (2019) version of Chrome?

[Crashed]

Originally posted by Eisberg:

Can you imagine if Google forced updates on CEF on every single developer that used it? Like, CEF was updated and it forced updates right on to the Steam client... it would break the client and we would have to wait for Valve to fix the client to use the new updated CEF that was forced on them. Can you image if Google forced updates? Valve is sure benefiting greatly from not being forced to update.

In this case CEF is open source so Valve has chosen to only apply required security patches backported from the current versions.

That said, bringing CEF to current might help with some of the performance issues some have suffered from. Just recently I figured out Chat was eating GPU quite readily while the much maligned Library at least knows how to go to sleep.

[deepfake]

I use the browser in-game in CSGO with full-screen 4:3 so I can't alt-tab (without getting a darker contrast for some reason).

The original question was quite simple, why is it an old version of Chrome (which CEF uses) as there are a fair number of security holes there. Twitter blocks you with the Steam browser for example.

I'm not talking about using it as your main browser, but it sounds like Valve might benefit from a little warning if it's not going to be patched in future, or less technical users could end up on a forum that exploits the browser version.