In my informal tests, most people are unable to hear any tone above 20khz or so. This is discovered, naturally, by starting with the highest pitch tone I can generate at the loudest volume, and lowering the pitch gradually until somebody covers their ears and starts screaming. This is usually the youngest person in the room.
You can generate and receive audio using web audio APIs. Creating a browser extension to detect ultrasonic comma would be fairly straightforward.