{"id":104144,"date":"2022-05-25T15:36:47","date_gmt":"2022-05-25T13:36:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-chrome-102"},"modified":"2022-05-25T15:36:47","modified_gmt":"2022-05-25T13:36:51","slug":"reliz-chrome-102","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-chrome-102","title":{"rendered":"Vyd\u00e1n\u00ed Chrome 102","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Spole\u010dnost Google p\u0159edstavila vyd\u00e1n\u00ed webov\u00e9ho prohl\u00ed\u017ee\u010de Chrome 102. Sou\u010dasn\u011b je k dispozici stabiln\u00ed vyd\u00e1n\u00ed otev\u0159en\u00e9ho projektu Chromium, kter\u00fd tvo\u0159\u00ed z\u00e1klad Chrome. Prohl\u00ed\u017ee\u010d Chrome se od Chromia li\u0161\u00ed pou\u017eit\u00edm logotyp\u016f Google, syst\u00e9mem odes\u00edl\u00e1n\u00ed ozn\u00e1men\u00ed v p\u0159\u00edpad\u011b p\u00e1du, moduly pro p\u0159ehr\u00e1v\u00e1n\u00ed chr\u00e1n\u011bn\u00e9ho videa (DRM), syst\u00e9mem automatick\u00e9 instalace aktualizac\u00ed, trval\u00fdm zapnut\u00edm sandboxov\u00e9 izolace, dod\u00e1v\u00e1n\u00edm kl\u00ed\u010d\u016f k Google API a p\u0159enosem RLZ parametr\u016f p\u0159i vyhled\u00e1v\u00e1n\u00ed. Pro ty, kte\u0159\u00ed pot\u0159ebuj\u00ed v\u00edce \u010dasu na aktualizaci, je k dispozici samostatn\u00e1 v\u011btev Extended Stable s podporou po dobu 8 t\u00fddn\u016f. Dal\u0161\u00ed vyd\u00e1n\u00ed Chrome 103 je napl\u00e1nov\u00e1no na 21. \u010dervna.       <\/p>\n<p>Hlavn\u00ed zm\u011bny v Chrome 102:  <\/p>\n<ul>\n<li class=\"l\"> Pro blokaci zneu\u017e\u00edv\u00e1n\u00ed zranitelnost\u00ed zp\u016fsoben\u00fdch p\u0159\u00edstupem k ji\u017e uvoln\u011bn\u00fdm blok\u016fm pam\u011bti (use-after-free) bylo m\u00edsto b\u011b\u017en\u00fdch ukazatel\u016f zah\u00e1jeno pou\u017eit\u00ed typu MiraclePtr (raw_ptr). MiraclePtr poskytuje obal nad ukazateli a prov\u00e1d\u00ed dodate\u010dn\u00e9 kontroly p\u0159\u00edstupu k uvoln\u011bn\u00fdm oblastem pam\u011bti, p\u0159i\u010dem\u017e v p\u0159\u00edpad\u011b nalezen\u00ed takov\u00fdch p\u0159\u00edstup\u016f program neprodlen\u011b ukon\u010duje. Vliv nov\u00e9 metody ochrany na v\u00fdkon a spot\u0159ebu pam\u011bti je hodnocen jako nev\u00fdznamn\u00fd. Mechanismus MiraclePtr nen\u00ed pou\u017eit ve v\u0161ech procesech, konkr\u00e9tn\u011b se nepou\u017e\u00edv\u00e1 ve vykreslovac\u00edch procesech, ale m\u016f\u017ee v\u00fdrazn\u011b zv\u00fd\u0161it bezpe\u010dnost. Nap\u0159\u00edklad v aktu\u00e1ln\u00edm vyd\u00e1n\u00ed bylo z 32 opraven\u00fdch zranitelnost\u00ed 12 vyvol\u00e1no probl\u00e9my t\u0159\u00eddy use-after-free.\n<li class=\"l\"> Byl zm\u011bn\u011bn design rozhran\u00ed se stahovan\u00fdmi soubory. M\u00edsto doln\u00edho panelu s informacemi o postupu stahov\u00e1n\u00ed byl do adresn\u00edho \u0159\u00e1dku p\u0159id\u00e1n nov\u00fd indik\u00e1tor, po jeho\u017e kliknut\u00ed se zobraz\u00ed p\u0159ehled o stahov\u00e1n\u00ed soubor\u016f a historie se seznamem ji\u017e sta\u017een\u00fdch soubor\u016f. Na rozd\u00edl od doln\u00edho panelu se tla\u010d\u00edtko trvale zobrazuje na panelu a umo\u017e\u0148uje rychl\u00fd p\u0159\u00edstup k historii stahov\u00e1n\u00ed. Nov\u00e9 rozhran\u00ed je zat\u00edm k dispozici pouze \u010d\u00e1sti u\u017eivatel\u016f a bude roz\u0161\u00ed\u0159eno na v\u0161echny v p\u0159\u00edpad\u011b, \u017ee nebudou hl\u00e1\u0161eny probl\u00e9my. Pro n\u00e1vrat ke star\u00e9mu rozhran\u00ed nebo aktivaci nov\u00e9ho je k dispozici nastaven\u00ed &#171;chrome:\/\/flags#download-bubble&#187;.    <center><img decoding=\"async\" alt=\"Vyd\u00e1n\u00ed Chrome 102\" src=\"\/wp-content\/uploads\/2022\/05\/881e51016e023bfd30164e77c40ac1a9.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center>\n<li class=\"l\"> P\u0159i vyhled\u00e1v\u00e1n\u00ed obr\u00e1zk\u016f prost\u0159ednictv\u00edm kontextov\u00e9ho menu (&#171;Hledat obr\u00e1zek pomoc\u00ed Google Lens&#187; nebo &#171;Naj\u00edt pomoc\u00ed Google Objekty&#187;) se v\u00fdsledky nyn\u00ed zobrazuj\u00ed nikoli na samostatn\u00e9 str\u00e1nce, ale v bo\u010dn\u00edm panelu vedle obsahu p\u016fvodn\u00ed str\u00e1nky (v jednom okn\u011b lze sou\u010dasn\u011b vid\u011bt jak obsah str\u00e1nky, tak i v\u00fdsledky vyhled\u00e1v\u00e1n\u00ed).     <center><img decoding=\"async\" alt=\"Vyd\u00e1n\u00ed Chrome 102\" src=\"\/wp-content\/uploads\/2022\/05\/77883fb0af04753b22ea71835b22b12e.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center>\n<li class=\"l\"> V nastaven\u00ed v sekci &#171;Ochrana soukrom\u00ed a bezpe\u010dnost&#187; byla p\u0159id\u00e1na sekce &#171;Pr\u016fvodce ochranou soukrom\u00ed&#187; (&#171;Privacy Guide&#187;), kter\u00e1 poskytuje celkov\u00fd p\u0159ehled hlavn\u00edch nastaven\u00ed ovliv\u0148uj\u00edc\u00edch soukrom\u00ed s podrobn\u00fdmi vysv\u011btlen\u00edmi o vlivu ka\u017ed\u00e9ho nastaven\u00ed. Nap\u0159\u00edklad v sekci lze definovat politiku odes\u00edl\u00e1n\u00ed dat do slu\u017eeb Google, spravovat synchronizaci, zpracov\u00e1n\u00ed cookies a uchov\u00e1v\u00e1n\u00ed historie. Funkce je nab\u00edzena \u010d\u00e1sti u\u017eivatel\u016f, pro aktivaci lze pou\u017e\u00edt nastaven\u00ed &#171;chrome:\/\/flags#privacy-guide&#187;.  <center><img decoding=\"async\" alt=\"Vyd\u00e1n\u00ed Chrome 102\" src=\"\/wp-content\/uploads\/2022\/05\/fb94e3b3c63f87d95fe981f8caf5885f.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center>\n<li class=\"l\"> Bylo zaji\u0161t\u011bno strukturov\u00e1n\u00ed historie vyhled\u00e1v\u00e1n\u00ed a nav\u0161t\u00edven\u00fdch str\u00e1nek. P\u0159i pokusu o opakovan\u00e9 vyhled\u00e1v\u00e1n\u00ed v adresn\u00edm \u0159\u00e1dku se zobraz\u00ed n\u00e1pov\u011bda &#171;Pokra\u010dovat v hled\u00e1n\u00ed v historii&#187; (&#171;Resume your journey&#187;), kter\u00e1 umo\u017e\u0148uje pokra\u010dovat v hled\u00e1n\u00ed od m\u00edsta, kde bylo p\u0159eru\u0161eno minule.    <center><img decoding=\"async\" alt=\"Vyd\u00e1n\u00ed Chrome 102\" src=\"\/wp-content\/uploads\/2022\/05\/a418bac0af3938fda6070fee75dead4c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center>\n<li class=\"l\"> V katalogu Chrome Web Store byla navr\u017eena str\u00e1nka &#171;Extensions Starter Kit&#187; s po\u010d\u00e1te\u010dn\u00edm v\u00fdb\u011brem doporu\u010den\u00fdch dopl\u0148k\u016f.\n<li class=\"l\"> V testovac\u00edm re\u017eimu je povoleno odes\u00edl\u00e1n\u00ed \u017e\u00e1dosti o potvrzen\u00ed opr\u00e1vn\u011bn\u00ed CORS (Cross-Origin Resource Sharing) na server hlavn\u00edho webu s hlavi\u010dkou &laquo;Access-Control-Request-Private-Network: true&raquo;, v p\u0159\u00edpad\u011b p\u0159\u00edstupu ze str\u00e1nky k prost\u0159edku v intern\u00ed s\u00edti (192.168.x.x, 10.x.x.x, 172.16.x.x) nebo k localhostu (128.x.x.x). P\u0159i potvrzen\u00ed operace by m\u011bl server v odpov\u011bdi na tuto \u017e\u00e1dost vr\u00e1tit hlavi\u010dku &laquo;Access-Control-Allow-Private-Network: true&raquo;. V verzi Chrome 102 v\u00fdsledek potvrzen\u00ed je\u0161t\u011b neovliv\u0148uje zpracov\u00e1n\u00ed \u017e\u00e1dosti \u2014 v p\u0159\u00edpad\u011b absence potvrzen\u00ed se v konzoli webu zobrazuje varov\u00e1n\u00ed, ale \u017e\u00e1dost o subprost\u0159edek nen\u00ed blokov\u00e1na. O\u010dek\u00e1v\u00e1 se, \u017ee blokov\u00e1n\u00ed p\u0159i absenci potvrzen\u00ed ze serveru nebude d\u0159\u00edve ne\u017e v verzi Chrome 105. Pro povolen\u00ed blokov\u00e1n\u00ed ve star\u0161\u00edch verz\u00edch lze aktivovat nastaven\u00ed &laquo;chrome:\/\/flags\/#private-network-access-respect-preflight-results&raquo;.\n<p>Potvrzen\u00ed opr\u00e1vn\u011bn\u00ed <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/server\/dts-prohoster\/\"   title=\"serverem\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3048\">serverem<\/a> bylo zavedeno pro zv\u00fd\u0161en\u00ed ochrany proti \u00fatok\u016fm souvisej\u00edc\u00edm s p\u0159\u00edstupem k prost\u0159edk\u016fm v lok\u00e1ln\u00ed s\u00edti nebo na po\u010d\u00edta\u010di u\u017eivatele (localhost) ze skript\u016f na\u010d\u00edtan\u00fdch p\u0159i otev\u0159en\u00ed webu. Takov\u00e9 \u017e\u00e1dosti jsou pou\u017e\u00edv\u00e1ny \u00fato\u010dn\u00edky k prov\u00e1d\u011bn\u00ed CSRF \u00fatok\u016f na routery, p\u0159\u00edstupov\u00e9 body, tisk\u00e1rny, firemn\u00ed webov\u00e9 rozhran\u00ed a dal\u0161\u00ed za\u0159\u00edzen\u00ed a slu\u017eby, kter\u00e9 p\u0159ij\u00edmaj\u00ed \u017e\u00e1dosti pouze z lok\u00e1ln\u00ed s\u00edt\u011b. Pro ochranu proti takov\u00fdm \u00fatok\u016fm bude p\u0159i p\u0159\u00edstupu k jak\u00fdmkoli subzdroj\u016fm v intern\u00ed s\u00edti prohl\u00ed\u017ee\u010d odes\u00edlat explicitn\u00ed \u017e\u00e1dost o opr\u00e1vn\u011bn\u00ed pro na\u010d\u00edt\u00e1n\u00ed t\u011bchto subzdroj\u016f.       <\/p>\n<li class=\"l\"> P\u0159i otev\u00edr\u00e1n\u00ed odkaz\u016f v re\u017eimu inkognito prost\u0159ednictv\u00edm kontextov\u00e9ho menu dojde k automatick\u00e9mu odstran\u011bn\u00ed n\u011bkter\u00fdch parametr\u016f z URL, kter\u00e9 ovliv\u0148uj\u00ed soukrom\u00ed.\n<li class=\"l\"> Byla zm\u011bn\u011bna strategie dod\u00e1v\u00e1n\u00ed aktualizac\u00ed pro Windows a Android. Pro podrobn\u011bj\u0161\u00ed srovn\u00e1n\u00ed chov\u00e1n\u00ed nov\u00e9 a star\u00e9 verze byly nyn\u00ed vytvo\u0159eny r\u016fzn\u00e9 sestavy nov\u00e9 verze ke sta\u017een\u00ed.\n<li class=\"l\"> Byla stabilizov\u00e1na technologie segmentace s\u00edt\u011b pro ochranu proti metod\u00e1m sledov\u00e1n\u00ed pohyb\u016f u\u017eivatele mezi weby, kter\u00e9 jsou zalo\u017eeny na ukl\u00e1d\u00e1n\u00ed identifik\u00e1tor\u016f v oblastech, kter\u00e9 nejsou ur\u010deny k trval\u00e9mu ukl\u00e1d\u00e1n\u00ed informac\u00ed (&laquo;Supercookies&raquo;). Proto\u017ee se prost\u0159edky v cache ukl\u00e1daj\u00ed ve spole\u010dn\u00e9m prostoru n\u00e1zv\u016f, nez\u00e1visle na p\u016fvodn\u00ed dom\u00e9n\u011b, m\u016f\u017ee jeden web zkontrolovat na\u010dten\u00ed prost\u0159edk\u016f z jin\u00e9ho webu prost\u0159ednictv\u00edm kontroly existence tohoto prost\u0159edku v cache. Ochrana je zalo\u017eena na aplikaci segmentace s\u00edt\u011b (Network Partitioning), jej\u00ed\u017e podstata spo\u010d\u00edv\u00e1 v p\u0159id\u00e1n\u00ed dal\u0161\u00ed vazby z\u00e1znam\u016f do sd\u00edlen\u00fdch cache. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/domain\/\"   title=\"domain\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1232\">domain<\/a>, z kter\u00e9ho byla otev\u0159ena hlavn\u00ed str\u00e1nka, co\u017e omezuje rozsah pokryt\u00ed cache pro sledovac\u00ed skripty pouze na aktu\u00e1ln\u00ed str\u00e1nku (skript z iframe nebude schopen zjistit, zda byl prost\u0159edek na\u010dten z jin\u00e9 str\u00e1nky). Odd\u011blen\u00ed stavu pokr\u00fdv\u00e1 s\u00ed\u0165ov\u00e1 spojen\u00ed (HTTP\/1, HTTP\/2, HTTP\/3, websocket), cache DNS, data ALPN\/HTTP2, TLS\/HTTP3, konfiguraci, na\u010d\u00edt\u00e1n\u00ed a informace v z\u00e1hlav\u00ed Expect-CT.\n<li class=\"l\"> Pro nainstalovan\u00e9 isolovan\u00e9 webov\u00e9 aplikace (PWA, Progressive Web App) byla p\u0159id\u00e1na mo\u017enost zm\u011bny designu oblasti z\u00e1hlav\u00ed okna pomoc\u00ed komponent Window Controls Overlay, kter\u00e9 roz\u0161i\u0159uj\u00ed zobrazovac\u00ed plochu webov\u00e9 aplikace na cel\u00e9 okno. Webov\u00e1 aplikace m\u016f\u017ee \u0159\u00eddit vykreslov\u00e1n\u00ed a zpracov\u00e1n\u00ed vstupu v cel\u00e9m okn\u011b, s v\u00fdjimkou p\u0159ekryvn\u00e9ho bloku se standardn\u00edmi ovl\u00e1dac\u00edmi tla\u010d\u00edtky okna (uzav\u0159en\u00ed, minimalizace, maximalizace), co\u017e d\u00e1v\u00e1 webov\u00e9 aplikaci vzhled b\u011b\u017en\u00e9 desktopov\u00e9 aplikace.     <center><img decoding=\"async\" alt=\"Vyd\u00e1n\u00ed Chrome 102\" src=\"\/wp-content\/uploads\/2022\/05\/031f5a10467272712cbe2ac6e3ee2808.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center>\n<li class=\"l\"> Do syst\u00e9mu automatick\u00e9ho vypl\u0148ov\u00e1n\u00ed formul\u00e1\u0159\u016f byla p\u0159id\u00e1na podpora generov\u00e1n\u00ed virtu\u00e1ln\u00edch \u010d\u00edsel kreditn\u00edch karet v pol\u00edch pro \u00fadaje o platb\u011b zbo\u017e\u00ed v internetov\u00fdch obchodech. Pou\u017eit\u00ed virtu\u00e1ln\u00ed karty, jej\u00ed\u017e \u010d\u00edslo je generov\u00e1no pro ka\u017edou platbu, umo\u017e\u0148uje nezve\u0159ej\u0148ovat \u00fadaje o skute\u010dn\u00e9 kreditn\u00ed kart\u011b, ale vy\u017eaduje poskytnut\u00ed pot\u0159ebn\u00e9 slu\u017eby bankou. V sou\u010dasn\u00e9 dob\u011b m\u016f\u017ee tuto funkci vyu\u017e\u00edvat pouze klienti n\u011bkter\u00fdch bank v USA. Pro \u0159\u00edzen\u00ed zapnut\u00ed t\u00e9to funkce bylo navr\u017eeno nastaven\u00ed &laquo;chrome:\/\/flags\/#autofill-enable-virtual-card&raquo;.\n<li class=\"l\"> Standardn\u011b je aktivov\u00e1n mechanismus \u201eCapture Handle\u201c, kter\u00fd umo\u017e\u0148uje p\u0159ed\u00e1vat informace aplikac\u00edm prov\u00e1d\u011bj\u00edc\u00edm zachycov\u00e1n\u00ed videa. API umo\u017e\u0148uje organizovat interakci aplikac\u00ed, jejich\u017e obsah je nahr\u00e1v\u00e1n, s aplikacemi, kter\u00e9 prov\u00e1d\u011bj\u00ed z\u00e1znam. Nap\u0159\u00edklad aplikace pro videokonference, kter\u00e1 zachycuje video pro vys\u00edl\u00e1n\u00ed prezentace, m\u016f\u017ee z\u00edskat informace o ovl\u00e1dac\u00edch prvc\u00edch prezentace a zobrazit je ve videu.\n<li class=\"l\"> Ve v\u00fdchoz\u00edm nastaven\u00ed je povolena podpora spekulativn\u00edch pravidel (Speculation rules), kter\u00e1 poskytuj\u00ed flexibiln\u00ed syntaxi pro definov\u00e1n\u00ed mo\u017enosti p\u0159edb\u011b\u017en\u00e9ho na\u010d\u00edt\u00e1n\u00ed dat souvisej\u00edc\u00edch se odkazy, k n\u011bmu\u017e doch\u00e1z\u00ed p\u0159ed p\u0159echodem u\u017eivatele na odkaz.\n<li class=\"l\"> Byl stabilizov\u00e1n mechanismus balen\u00ed zdroj\u016f do bal\u00edk\u016f ve form\u00e1tu Web Bundle, co\u017e umo\u017e\u0148uje zv\u00fd\u0161it efektivitu na\u010d\u00edt\u00e1n\u00ed velk\u00e9ho mno\u017estv\u00ed souvisej\u00edc\u00edch soubor\u016f (CSS styly, JavaScript, obr\u00e1zky, iframe). Na rozd\u00edl od bal\u00edk\u016f ve form\u00e1tu Webpack m\u00e1 form\u00e1t Web Bundle n\u00e1sleduj\u00edc\u00ed v\u00fdhody: v HTTP cache se ukl\u00e1d\u00e1 nikoli samotn\u00fd bal\u00edk, ale jeho slo\u017eky; kompilace a vykon\u00e1v\u00e1n\u00ed JavaScriptu za\u010d\u00edn\u00e1 bez \u010dek\u00e1n\u00ed na kompletn\u00ed na\u010dten\u00ed bal\u00edku; je povoleno zahrnout dal\u0161\u00ed zdroje, jako jsou CSS a obr\u00e1zky, kter\u00e9 by v webpacku musely b\u00fdt zak\u00f3dov\u00e1ny ve form\u011b JavaScriptov\u00fdch \u0159et\u011bzc\u016f.\n<li class=\"l\"> Byla poskytnuta mo\u017enost definovat PWA aplikaci jako zpracovatele ur\u010dit\u00fdch MIME typ\u016f a p\u0159\u00edpon soubor\u016f. Po ur\u010den\u00ed vazby prost\u0159ednictv\u00edm pole file_handlers v manifestu aplikace obdr\u017e\u00ed speci\u00e1ln\u00ed ud\u00e1lost p\u0159i pokusu u\u017eivatele otev\u0159\u00edt soubor, kter\u00fd je s aplikac\u00ed spojen.\n<li class=\"l\"> Byl p\u0159id\u00e1n nov\u00fd atribut inert, kter\u00fd umo\u017e\u0148uje ozna\u010dit \u010d\u00e1st stromu DOM jako \u201eneaktivn\u00ed\u201c. Pro uzly DOM ve tomto stavu jsou vypnuty obslu\u017en\u00e9 programy pro v\u00fdb\u011br textu a pro pohyb kurzoru, co\u017e znamen\u00e1, \u017ee CSS vlastnosti pointer-events a user-select jsou v\u017edy nastaveny na hodnotu \u2018none\u2019. Pokud byl uzel editovateln\u00fd, v re\u017eimu inert se st\u00e1v\u00e1 needitovateln\u00fdm.\n<li class=\"l\"> Bylo p\u0159id\u00e1no API Navigation, kter\u00e9 umo\u017e\u0148uje webov\u00fdm aplikac\u00edm zachyt\u00e1vat operace navigace v okn\u011b, iniciovat p\u0159echody a analyzovat historii akc\u00ed s aplikac\u00ed. API poskytuje alternativu k vlastnostem window.history a window.location, optimalizovanou pro jednopostranov\u00e9 webov\u00e9 aplikace.\n<li class=\"l\"> Pro atribut \u201ahidden\u2018 byl navr\u017een nov\u00fd p\u0159\u00edznak \u201auntil-found\u2018, kter\u00fd \u010din\u00ed prvek dostupn\u00fdm pro hled\u00e1n\u00ed na str\u00e1nce a proch\u00e1zen\u00ed p\u0159es textovou masku. Nap\u0159\u00edklad lze na str\u00e1nku p\u0159idat skryt\u00fd text, jeho\u017e obsah bude nalezen p\u0159i m\u00edstn\u00edm vyhled\u00e1v\u00e1n\u00ed.\n<li class=\"l\"> V API WebHID, ur\u010den\u00e9m pro n\u00edzko\u00farov\u0148ov\u00fd p\u0159\u00edstup k HID za\u0159\u00edzen\u00edm (Human Interface Device, kl\u00e1vesnice, my\u0161i, hern\u00ed ovlada\u010de, dotykov\u00e9 panely) a organizaci pr\u00e1ce bez specifick\u00fdch ovlada\u010d\u016f v syst\u00e9mu, byla do objektu requestDevice() p\u0159id\u00e1na vlastnost exclusionFilters, kter\u00e1 umo\u017e\u0148uje vylou\u010dit ur\u010dit\u00e1 za\u0159\u00edzen\u00ed p\u0159i zobrazov\u00e1n\u00ed seznamu dostupn\u00fdch za\u0159\u00edzen\u00ed v prohl\u00ed\u017ee\u010di. Nap\u0159\u00edklad je mo\u017en\u00e9 vylou\u010dit identifik\u00e1tory za\u0159\u00edzen\u00ed, kter\u00e1 maj\u00ed zn\u00e1m\u00e9 probl\u00e9my.\n<li class=\"l\"> Je zak\u00e1z\u00e1no zobrazovat formul\u00e1\u0159 pro platbu prost\u0159ednictv\u00edm vol\u00e1n\u00ed PaymentRequest.show() bez evidentn\u00edho z\u00e1sahu u\u017eivatele, nap\u0159\u00edklad kliknut\u00edm na prvek spojen\u00fd s handlerem.\n<li class=\"l\"> Podpora alternativn\u00ed implementace protokolu SDP (Session Description Protocol), kter\u00fd se pou\u017e\u00edv\u00e1 pro nastaven\u00ed relace ve WebRTC, byla ukon\u010dena. V Chrome byly navr\u017eeny dv\u011b varianty SDP \u2014 sjednocen\u00e1 s jin\u00fdmi prohl\u00ed\u017ee\u010di a specifick\u00e1 pro Chrome. Nyn\u00ed z\u016fst\u00e1v\u00e1 pouze p\u0159enosn\u00e1 varianta.\n<li class=\"l\"> Byla zlep\u0161ena n\u00e1stroje pro webov\u00e9 v\u00fdvoj\u00e1\u0159e. V panelu Styl\u016f byly p\u0159id\u00e1ny tla\u010d\u00edtka pro simulaci aplikace tmav\u00e9ho a sv\u011btl\u00e9ho motivu. Byla pos\u00edlena ochrana karty N\u00e1hled v re\u017eimu inspekce s\u00edt\u011b (povolen\u00ed aplikace Content Security Policy). V ladic\u00edm n\u00e1stroji bylo implementov\u00e1no dokon\u010den\u00ed vykon\u00e1v\u00e1n\u00ed skriptu pro znovu na\u010dten\u00ed bod\u016f zastaven\u00ed. Byla navr\u017eena p\u0159edb\u011b\u017en\u00e1 implementace nov\u00e9ho panelu \u201ePerformance insights\u201c, kter\u00fd umo\u017e\u0148uje analyzovat v\u00fdkon prov\u00e1d\u011bn\u00ed konkr\u00e9tn\u00edch operac\u00ed na str\u00e1nce.     <center><img decoding=\"async\" alt=\"Vyd\u00e1n\u00ed Chrome 102\" src=\"\/wp-content\/uploads\/2022\/05\/5a855d7b3bd823b358b72ae4222c2949.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center>        <\/ul>\n<p>Krom\u011b novinek a opravy chyb byla v nov\u00e9 verzi odstran\u011bna 32 zranitelnost. Mnoh\u00e9 z zranitelnost\u00ed byly odhaleny d\u00edky automatizovan\u00e9mu testov\u00e1n\u00ed n\u00e1stroji AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer a AFL. Jedn\u00e9 z probl\u00e9m\u016f (CVE-2022-1853) byl p\u0159id\u011blen kritick\u00fd \u00farove\u0148 nebezpe\u010d\u00ed, kter\u00e1 znamen\u00e1 mo\u017enost obej\u00edt v\u0161echny \u00farovn\u011b ochrany prohl\u00ed\u017ee\u010de a vykonat k\u00f3d v syst\u00e9mu mimo p\u00edskovi\u0161\u0165ov\u00e9 prost\u0159ed\u00ed. Podrobnosti k t\u00e9to zranitelnosti zat\u00edm nejsou zve\u0159ejn\u011bny, je zn\u00e1mo pouze to, \u017ee je zp\u016fsobena p\u0159\u00edstupem k uvoln\u011bn\u00e9mu bloku pam\u011bti (use-after-free) v implementaci API Indexed DB.    <\/p>\n<p>V r\u00e1mci programu odm\u011bn za objeven\u00ed zranitelnost\u00ed pro aktu\u00e1ln\u00ed vyd\u00e1n\u00ed spole\u010dnost Google vyplatila 24 odm\u011bn v celkov\u00e9 v\u00fd\u0161i 65600 dolar\u016f (jedna odm\u011bna $10000, jedna odm\u011bna $7500, dv\u011b odm\u011bny $7000, t\u0159i odm\u011bny $5000, \u010dty\u0159i odm\u011bny $3000, dv\u011b odm\u011bny $2000, dv\u011b odm\u011bny $1000 a dv\u011b odm\u011bny $500). V\u00fd\u0161e 7 odm\u011bn zat\u00edm nebyla ur\u010dena.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=57247\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome 102. \u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Chromium, \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u044e\u0449\u0435\u0433\u043e \u043e\u0441\u043d\u043e\u0432\u043e\u0439 Chrome. \u0411\u0440\u0430\u0443\u0437\u0435\u0440 Chrome \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 Chromium \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043b\u043e\u0433\u043e\u0442\u0438\u043f\u043e\u0432 Google, \u043d\u0430\u043b\u0438\u0447\u0438\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043a\u0440\u0430\u0445\u0430, \u043c\u043e\u0434\u0443\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0433\u043e \u043e\u0442 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 (DRM), \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u043c \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c Sandbox-\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438, \u043f\u043e\u0441\u0442\u0430\u0432\u043a\u043e\u0439 \u043a\u043b\u044e\u0447\u0435\u0439 \u043a Google API \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0435\u0439 \u043f\u0440\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":104145,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104144","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome 102. \u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Chromium, \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u044e\u0449\u0435\u0433\u043e \u043e\u0441\u043d\u043e\u0432\u043e\u0439 Chrome.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-chrome-102\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 Chrome 102 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome 102. \u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Chromium, \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u044e\u0449\u0435\u0433\u043e \u043e\u0441\u043d\u043e\u0432\u043e\u0439 Chrome.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-chrome-102\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-05-25T13:36:51+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-05-25T13:36:51+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vyd\u00e1n\u00ed Chrome 102 | ProHoster","description":"Spole\u010dnost Google p\u0159edstavila vyd\u00e1n\u00ed webov\u00e9ho prohl\u00ed\u017ee\u010de Chrome 102. Sou\u010dasn\u011b je k dispozici stabiln\u00ed vyd\u00e1n\u00ed voln\u00e9ho projektu Chromium, kter\u00fd slou\u017e\u00ed jako z\u00e1klad pro Chrome.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-chrome-102","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 Chrome 102 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome 102. \u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Chromium, \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u044e\u0449\u0435\u0433\u043e \u043e\u0441\u043d\u043e\u0432\u043e\u0439 Chrome.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-chrome-102","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-25T13:36:51+00:00","article:modified_time":"2022-05-25T13:36:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104144","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:25:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-25 13:38:01","updated":"2026-02-09 22:25:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104144","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=104144"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104144\/revisions"}],"predecessor-version":[{"id":160329,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104144\/revisions\/160329"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/104145"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=104144"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=104144"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=104144"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}