{"id":96168,"date":"2020-10-09T01:41:57","date_gmt":"2020-10-08T23:41:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/chrome-86"},"modified":"2020-10-09T01:41:57","modified_gmt":"2020-10-08T23:41:57","slug":"chrome-86","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/chrome-86","title":{"rendered":"Chrome 86","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Byla vyd\u00e1na dal\u0161\u00ed verze Chrome 86 a stabiln\u00ed vyd\u00e1n\u00ed Chromium.\n<\/p>\n<p>Hlavn\u00ed zm\u011bny v Chrome 86:<\/p>\n<ul>\n<li> ochrana p\u0159ed nebezpe\u010dn\u00fdm odes\u00edl\u00e1n\u00edm formul\u00e1\u0159\u016f na str\u00e1nk\u00e1ch na\u010dten\u00fdch p\u0159es HTTPS, ale odes\u00edlaj\u00edc\u00edch data p\u0159es HTTP.<\/li>\n<li> Blokov\u00e1n\u00ed nebezpe\u010dn\u00e9ho na\u010d\u00edt\u00e1n\u00ed (http) spustiteln\u00fdch soubor\u016f bylo dopln\u011bno o blokaci nebezpe\u010dn\u00e9ho na\u010d\u00edt\u00e1n\u00ed archiv\u016f (zip, iso atd.) a zobrazen\u00ed upozorn\u011bn\u00ed p\u0159i nebezpe\u010dn\u00e9m na\u010d\u00edt\u00e1n\u00ed dokument\u016f (docx, pdf atd.). V n\u00e1sleduj\u00edc\u00edm vyd\u00e1n\u00ed se o\u010dek\u00e1v\u00e1 blokov\u00e1n\u00ed dokument\u016f a zobrazen\u00ed upozorn\u011bn\u00ed pro obr\u00e1zky, textov\u00e9 a multimedi\u00e1ln\u00ed soubory. Blokov\u00e1n\u00ed bylo implementov\u00e1no, proto\u017ee na\u010d\u00edt\u00e1n\u00ed soubor\u016f bez \u0161ifrov\u00e1n\u00ed m\u016f\u017ee b\u00fdt pou\u017eito k vykon\u00e1v\u00e1n\u00ed \u0161kodliv\u00fdch \u010dinnost\u00ed podvr\u017een\u00edm obsahu b\u011bhem MITM \u00fatok\u016f.<\/li>\n<li> V kontextov\u00e9m menu je jako v\u00fdchoz\u00ed zobrazena mo\u017enost &#171;V\u017edy zobrazovat URL \u00fapln\u011b&#187;, kterou bylo d\u0159\u00edve nutn\u00e9 aktivovat zm\u011bnou nastaven\u00ed na str\u00e1nce about:flags. \u00dapln\u00e9 URL lze tak\u00e9 zobrazit dvojit\u00fdm kliknut\u00edm na adresn\u00ed \u0159\u00e1dek. P\u0159ipom\u00edn\u00e1me, \u017ee od Chrome 76 se v\u00fdchoz\u00ed adresa zobrazuje bez protokolu a subdom\u00e9ny www. V Chrome 79 byla odstran\u011bna mo\u017enost n\u00e1vratu ke star\u00e9mu chov\u00e1n\u00ed, ale po nespokojenosti u\u017eivatel\u016f byl v Chrome 83 p\u0159id\u00e1n nov\u00fd experiment\u00e1ln\u00ed p\u0159ep\u00edna\u010d, kter\u00fd p\u0159id\u00e1v\u00e1 do kontextov\u00e9ho menu polo\u017eku pro vypnut\u00ed skryt\u00ed a zobrazen\u00ed \u00fapln\u00e9ho URL za v\u0161ech okolnost\u00ed.<br \/>\n<noindex>Pro mal\u00e9 procento u\u017eivatel\u016f byl spu\u0161t\u011bn experiment, kter\u00fd zobrazuje ve v\u00fdchoz\u00edm nastaven\u00ed v adresn\u00edm \u0159\u00e1dku pouze dom\u00e9nu, bez prvk\u016f cesty a parametr\u016f dotazu. Nap\u0159\u00edklad m\u00edsto &quot;<a rel=\"nofollow\" href=\"https:\/\/example.com\/secure-google-sign-in\/&quot;\">https:\/\/example.com\/secure-google-sign-in\/&quot;<\/a> se zobraz\u00ed &#171;example.com&#187;. Zprovozn\u011bn\u00ed navrhovan\u00e9ho re\u017eimu pro v\u0161echny u\u017eivatele se o\u010dek\u00e1v\u00e1 v n\u011bkter\u00e9m z n\u00e1sleduj\u00edc\u00edch vyd\u00e1n\u00ed. Chcete-li toto chov\u00e1n\u00ed vypnout, m\u016f\u017eete pou\u017e\u00edt mo\u017enost &#171;V\u017edy zobrazovat URL \u00fapln\u011b&#187;, a pro zobrazen\u00ed cel\u00e9ho URL m\u016f\u017eete kliknout na adresn\u00ed \u0159\u00e1dek. Motivac\u00ed pro zm\u011bnu je snaha chr\u00e1nit u\u017eivatele p\u0159ed phishingem, kter\u00fd manipuluje parametry v URL &#8212; \u00fato\u010dn\u00edci vyu\u017e\u00edvaj\u00ed nepozornosti u\u017eivatel\u016f, aby vytvo\u0159ili dojem otev\u0159en\u00ed jin\u00e9ho webu a prov\u00e1d\u011bn\u00ed podvodn\u00fdch \u010din\u016f (pokud si technicky zdatn\u00ed u\u017eivatel\u00e9 t\u011bchto podvod\u016f v\u0161imnou, nezku\u0161en\u00e9 osoby snadno nalet\u00ed na takov\u00e9 jednoduch\u00e9 manipulace).<\/li>\n<li> Byla obnovena iniciativa na odstran\u011bn\u00ed podpory FTP. V Chrome 86 je FTP ve v\u00fdchoz\u00edm nastaven\u00ed vypnut pro p\u0159ibli\u017en\u011b 1 % u\u017eivatel\u016f, a v Chrome 87 se rozsah vypnut\u00ed zv\u00fd\u0161\u00ed na 50 %, ale podporu bude mo\u017en\u00e9 obnovit pomoc\u00ed p\u0159ep\u00edna\u010de &quot;&#8212;enable-ftp&quot; nebo &quot;&#8212;enable-features=FtpProtocol&quot;. V Chrome 88 bude podpora FTP zcela vypnuta.<\/li>\n<li> V Android verzi, podobn\u011b jako v desktopov\u00fdch syst\u00e9mech, byla v mana\u017eeru hesel implementov\u00e1na kontrola ulo\u017een\u00fdch p\u0159ihla\u0161ovac\u00edch \u00fadaj\u016f a hesel proti datab\u00e1zi kompromitovan\u00fdch \u00fa\u010dt\u016f s upozorn\u011bn\u00edm v p\u0159\u00edpad\u011b zji\u0161t\u011bn\u00ed probl\u00e9m\u016f nebo pokusu o pou\u017eit\u00ed p\u0159\u00edli\u0161 jednoduch\u00fdch hesel. Kontrola prob\u00edh\u00e1 proti datab\u00e1zi zahrnuj\u00edc\u00ed v\u00edce ne\u017e 4 miliardy kompromitovan\u00fdch \u00fa\u010dt\u016f, kter\u00e9 se objevily v \u00fanik\u00e1ch u\u017eivatelsk\u00fdch datab\u00e1z\u00ed. Pro zachov\u00e1n\u00ed soukrom\u00ed se pou\u017e\u00edv\u00e1 kontrola hash prefixu na stran\u011b u\u017eivatele, a samotn\u00e1 hesla ani jejich pln\u00e9 hashe nejsou odes\u00edl\u00e1ny ven.<\/li>\n<li> Do verze pro Android byly tak\u00e9 p\u0159eneseny tla\u010d\u00edtko &laquo;Kontrola zabezpe\u010den\u00ed&raquo; (Safety check) a vylep\u0161en\u00fd re\u017eim ochrany p\u0159ed nebezpe\u010dn\u00fdmi weby (Enhanced Safe Browsing). Tla\u010d\u00edtko &laquo;Safety check&raquo; zobrazuje shrnut\u00ed o mo\u017en\u00fdch bezpe\u010dnostn\u00edch probl\u00e9mech, jako je pou\u017eit\u00ed kompromitovan\u00fdch hesel, stav kontroly \u0161kodliv\u00fdch web\u016f (Safe Browsing), nedostate\u010dn\u011b nainstalovan\u00e9 aktualizace a detekce \u0161kodliv\u00fdch dopl\u0148k\u016f. Vylep\u0161en\u00fd re\u017eim ochrany aktivuje dal\u0161\u00ed kontroly k ochran\u011b p\u0159ed phishingem, \u0161kodlivou aktivitou a dal\u0161\u00edmi hrozbami v s\u00edti, a zahrnuje tak\u00e9 dodate\u010dnou ochranu pro \u00fa\u010det Google a slu\u017eby Google (Gmail, Drive atd.). Pokud v b\u011b\u017en\u00e9m re\u017eimu Safe Browsing kontroly prob\u00edhaj\u00ed lok\u00e1ln\u011b prost\u0159ednictv\u00edm periodicky stahovan\u00e9 datab\u00e1ze do syst\u00e9mu klienta, pak v re\u017eimu Enhanced Safe Browsing jsou informace o str\u00e1nk\u00e1ch a stahov\u00e1n\u00ed pos\u00edl\u00e1ny v re\u00e1ln\u00e9m \u010dase k ov\u011b\u0159en\u00ed na server Google, co\u017e umo\u017e\u0148uje rychle reagovat na hrozby ihned po jejich odhalen\u00ed, ani\u017e by bylo t\u0159eba \u010dekat na aktualizaci lok\u00e1ln\u00edho blacklistu.<\/li>\n<li> Byla p\u0159id\u00e1na podpora souboru-indik\u00e1toru &quot;.well-known\/change-password&quot;, pomoc\u00ed kter\u00e9ho mohou majitel\u00e9 webov\u00fdch str\u00e1nek ur\u010dit adresu webov\u00e9ho formul\u00e1\u0159e pro zm\u011bnu hesla. V p\u0159\u00edpad\u011b zji\u0161t\u011bn\u00ed kompromitace u\u017eivatelsk\u00fdch \u00fadaj\u016f Chrome nyn\u00ed okam\u017eit\u011b nab\u00eddne u\u017eivateli formul\u00e1\u0159 pro zm\u011bnu hesla, stanoven\u00fd na z\u00e1klad\u011b informac\u00ed z tohoto souboru.<\/li>\n<li> Bylo zavedeno nov\u00e9 upozorn\u011bn\u00ed \u201eTip na bezpe\u010dnost\u201c, kter\u00e9 se zobrazuje p\u0159i otev\u0159en\u00ed web\u016f, jejich\u017e dom\u00e9ny jsou velmi podobn\u00e9 jin\u00e9mu webu a heuristika nazna\u010duje vysokou pravd\u011bpodobnost spoofingu (nap\u0159\u00edklad otev\u0159eno goog0le.com m\u00edsto google.com).\n<p>* Byla implementov\u00e1na podpora cache pro p\u0159echod (Back-forward cache), kter\u00e1 zaji\u0161\u0165uje okam\u017eit\u00e9 p\u0159ep\u00edn\u00e1n\u00ed p\u0159i pou\u017eit\u00ed tla\u010d\u00edtek &laquo;Zp\u011bt&raquo; a &laquo;Vp\u0159ed&raquo; nebo p\u0159i navigaci na d\u0159\u00edve zobrazen\u00e9 str\u00e1nky aktu\u00e1ln\u00edho webu. Cache se aktivuje pomoc\u00ed nastaven\u00ed chrome:\/\/flags\/#back-forward-cache.<\/p>\n<\/li>\n<li> Optimalizace spot\u0159eby CPU pro okna mimo oblast viditelnosti. Chrome kontroluje, zda je okno prohl\u00ed\u017ee\u010de p\u0159ekryto jin\u00fdmi okny, a vylu\u010duje vykreslov\u00e1n\u00ed pixel\u016f v p\u0159ekr\u00fdvaj\u00edc\u00edch se oblastech. Uveden\u00e1 optimalizace byla zapnuta pro mal\u00fd procento u\u017eivatel\u016f v Chrome 84 a 85, a nyn\u00ed byla aktivov\u00e1na v\u0161em. Ve srovn\u00e1n\u00ed s p\u0159edchoz\u00edmi verzemi byla tak\u00e9 odstran\u011bna nekompatibilita se syst\u00e9my virtualizace, kv\u016fli kter\u00e9 se zobrazovaly pr\u00e1zdn\u00e9 b\u00edl\u00e9 str\u00e1nky.<\/li>\n<li> Bylo pos\u00edleno omezen\u00ed zdroj\u016f pro pozadkov\u00e9 karty. Tyto karty nyn\u00ed nemohou spot\u0159ebov\u00e1vat v\u00edce ne\u017e 1% zdroj\u016f CPU a mohou se aktivovat pouze jednou za minutu. Po p\u011bti minut\u00e1ch na pozad\u00ed se karty zmraz\u00ed, s v\u00fdjimkou karet, na kter\u00fdch se p\u0159ehr\u00e1v\u00e1 multimedi\u00e1ln\u00ed obsah nebo se prov\u00e1d\u00ed nahr\u00e1v\u00e1n\u00ed.<\/li>\n<li> Byla obnovena pr\u00e1ce na unifikaci HTTP hlavi\u010dky User-Agent. V nov\u00e9 verzi byla pro v\u0161echny u\u017eivatele aktivov\u00e1na podpora mechanismu User-Agent Client Hints, vyv\u00edjen\u00e9ho jako n\u00e1hrada za User-Agent. Nov\u00fd mechanismus zahrnuje selektivn\u00ed poskytov\u00e1n\u00ed informac\u00ed o konkr\u00e9tn\u00edch parametrech prohl\u00ed\u017ee\u010de a syst\u00e9mu (verze, platforma atd.) pouze na z\u00e1klad\u011b \u017e\u00e1dosti serveru a d\u00e1v\u00e1 u\u017eivatel\u016fm mo\u017enost selektivn\u011b poskytovat podobn\u00e9 informace vlastn\u00edk\u016fm webov\u00fdch str\u00e1nek. P\u0159i pou\u017eit\u00ed User-Agent Client Hints se identifik\u00e1tor ve v\u00fdchoz\u00edm nastaven\u00ed nep\u0159en\u00e1\u0161\u00ed bez v\u00fdslovn\u00e9 \u017e\u00e1dosti, co\u017e znemo\u017e\u0148uje prov\u00e1d\u011bn\u00ed pasivn\u00ed identifikace (ve v\u00fdchoz\u00edm nastaven\u00ed je uvedeno pouze jm\u00e9no prohl\u00ed\u017ee\u010de).<\/noindex><br \/>\nByla zm\u011bn\u011bna indikace dostupnosti aktualizace a pot\u0159eby restartov\u00e1n\u00ed pro jej\u00ed instalaci. M\u00edsto barevn\u00e9 \u0161ipky v poli avatara \u00fa\u010dtu nyn\u00ed se objevuje n\u00e1pis \u201eAktualizovat\u201c.<\/li>\n<li> Byla vykon\u00e1na pr\u00e1ce na p\u0159echodu prohl\u00ed\u017ee\u010de na pou\u017e\u00edv\u00e1n\u00ed inkluzivn\u00ed terminologie. V n\u00e1zvech politik byla slova &laquo;whitelist&raquo; a &laquo;blacklist&raquo; nahrazena term\u00edny &laquo;allowlist&raquo; a &laquo;blocklist&raquo; (ji\u017e p\u0159idan\u00e9 politiky budou pokra\u010dovat v \u010dinnosti, ale bude se k nim vztahovat varov\u00e1n\u00ed o p\u0159echodu do kategorie zastaral\u00fdch). V k\u00f3du a n\u00e1zvech soubor\u016f byla zm\u00ednka o &laquo;blacklist&raquo; nahrazena term\u00ednem &laquo;blocklist&raquo;. Viditeln\u00e1 u\u017eivatelsk\u00e1 zm\u00edn\u011bn\u00ed &laquo;blacklist&raquo; a &laquo;whitelist&raquo; byla nahrazena ji\u017e na za\u010d\u00e1tku roku 2019.<br \/>\nByla p\u0159id\u00e1na experiment\u00e1ln\u00ed funkce \u00fapravy ulo\u017een\u00fdch hesel, kter\u00e1 se aktivuje pomoc\u00ed p\u0159\u00edznaku &#171;chrome:\/\/flags\/#edit-passwords-in-settings&#187;.<\/li>\n<li> API Native File System, kter\u00e9 umo\u017e\u0148uje vytv\u00e1\u0159et webov\u00e9 aplikace, interaguj\u00edc\u00ed se soubory v lok\u00e1ln\u00edm souborov\u00e9m syst\u00e9mu, bylo p\u0159evedeno do kategorie stabiln\u00edch a ve\u0159ejn\u011b dostupn\u00fdch. Nap\u0159\u00edklad toto nov\u00e9 API m\u016f\u017ee b\u00fdt popt\u00e1v\u00e1no v integrovan\u00fdch v\u00fdvojov\u00fdch prost\u0159ed\u00edch, textov\u00fdch editor\u016f, editor\u016f obr\u00e1zk\u016f a videa, kter\u00e9 b\u011b\u017e\u00ed v prohl\u00ed\u017ee\u010di. K z\u00edsk\u00e1n\u00ed mo\u017enosti p\u0159\u00edm\u00e9ho z\u00e1pisu a \u010dten\u00ed soubor\u016f \u010di pou\u017e\u00edv\u00e1n\u00ed dialog\u016f pro otev\u00edr\u00e1n\u00ed a ukl\u00e1d\u00e1n\u00ed soubor\u016f, stejn\u011b jako pro navigaci obsahem adres\u00e1\u0159\u016f, aplikace \u017e\u00e1d\u00e1 u\u017eivatele o speci\u00e1ln\u00ed potvrzen\u00ed.<\/li>\n<li> Byl p\u0159id\u00e1n CSS selektor \":focus-visible\", kter\u00fd pou\u017e\u00edv\u00e1 stejnou heuristiku, jak\u00e1 je pou\u017e\u00edv\u00e1na prohl\u00ed\u017ee\u010dem p\u0159i rozhodov\u00e1n\u00ed o zobrazen\u00ed indik\u00e1toru zm\u011bny zaost\u0159en\u00ed (p\u0159i p\u0159echodu zaost\u0159en\u00ed na tla\u010d\u00edtko kl\u00e1vesov\u00fdmi zkratkami se indik\u00e1tor objev\u00ed, ale p\u0159i kliknut\u00ed my\u0161\u00ed se nezobraz\u00ed). D\u0159\u00edve dostupn\u00fd CSS selektor \":focus\" v\u017edy zv\u00fdraz\u0148uje fokus. D\u00e1le byla do nastaven\u00ed p\u0159id\u00e1na mo\u017enost \u201eQuick Focus Highlight\u201c, p\u0159i jej\u00edm\u017e aktivaci se vedle aktivn\u00edch prvk\u016f zobraz\u00ed dodate\u010dn\u00fd indik\u00e1tor zaost\u0159en\u00ed, kter\u00fd z\u016fst\u00e1v\u00e1 viditeln\u00fd i kdy\u017e jsou na str\u00e1nce prost\u0159ednictv\u00edm CSS vypnuty prvky stylu pro vizu\u00e1ln\u00ed zv\u00fdrazn\u011bn\u00ed fokusu.<\/li>\n<li> V re\u017eimu Origin Trials (experiment\u00e1ln\u00ed funkce vy\u017eaduj\u00edc\u00ed samostatnou aktivaci) bylo p\u0159id\u00e1no n\u011bkolik nov\u00fdch API. Origin Trial zahrnuje mo\u017enost pr\u00e1ce se specifikovan\u00fdm API z aplikac\u00ed na\u010d\u00edtan\u00fdch z localhost nebo 127.0.0.1, nebo po registraci a z\u00edsk\u00e1n\u00ed speci\u00e1ln\u00edho tokenu, kter\u00fd plat\u00ed omezenou dobu pro konkr\u00e9tn\u00ed web.<\/li>\n<li> API WebHID pro n\u00edzko\u00farov\u0148ov\u00fd p\u0159\u00edstup k HID za\u0159\u00edzen\u00ed (\u010dlov\u011bkem ovl\u00e1dan\u00e1 za\u0159\u00edzen\u00ed, kl\u00e1vesnice, my\u0161i, hern\u00ed ovlada\u010de, dotykov\u00e9 panely), kter\u00e9 umo\u017e\u0148uje implementaci logiky pr\u00e1ce s HID za\u0159\u00edzen\u00edm v JavaScriptu pro organizaci pr\u00e1ce s neobvykl\u00fdmi HID za\u0159\u00edzen\u00edmi bez nutnosti specifick\u00fdch ovlada\u010d\u016f v syst\u00e9mu. Nov\u00e9 API je p\u0159edev\u0161\u00edm zam\u011b\u0159eno na poskytov\u00e1n\u00ed podpory pro hern\u00ed ovlada\u010de.<\/li>\n<li> API obrazovka informac\u00ed roz\u0161i\u0159uje mo\u017enosti API um\u00edst\u011bn\u00ed oken podporou konfigurac\u00ed s v\u00edce obrazovkami. Na rozd\u00edl od window.screen nov\u00fd API umo\u017e\u0148uje manipulovat s um\u00edst\u011bn\u00edm oken v celkov\u00e9m prostorov\u00e9m r\u00e1mci v\u00edcemonitorov\u00fdch syst\u00e9m\u016f, ani\u017e by byl omezen na aktu\u00e1ln\u00ed obrazovku.<\/li>\n<li> Meta-tag battery-savings, d\u00edky n\u011bmu\u017e m\u016f\u017ee web informovat prohl\u00ed\u017ee\u010d o pot\u0159eb\u011b aktivovat re\u017eimy \u00faspory energie a optimalizace zat\u00ed\u017een\u00ed CPU.<\/li>\n<li> API COOP Reporting pro informov\u00e1n\u00ed o potenci\u00e1ln\u00edch poru\u0161en\u00edch re\u017eim\u016f izolace Cross-Origin-Embedder-Policy (COEP) a Cross-Origin-Opener-Policy (COOP), bez pou\u017eit\u00ed skute\u010dn\u00fdch omezen\u00ed.<\/li>\n<li> V API spr\u00e1vy pov\u011b\u0159en\u00ed byl p\u0159edstaven nov\u00fd typ pov\u011b\u0159en\u00ed PaymentCredential, kter\u00fd poskytuje dodate\u010dn\u00e9 ov\u011b\u0159en\u00ed prov\u00e1d\u011bn\u00e9 platebn\u00ed operace. Ov\u011b\u0159uj\u00edc\u00ed strana, nap\u0159. banka, m\u00e1 mo\u017enost vygenerovat ve\u0159ejn\u00fd kl\u00ed\u010d PublicKeyCredential, kter\u00fd m\u016f\u017ee b\u00fdt po\u017eadov\u00e1n prodejcem pro dodate\u010dn\u00e9 bezpe\u010dn\u00e9 ov\u011b\u0159en\u00ed platby.<\/li>\n<li> V API PointerEvents byla p\u0159id\u00e1na podpora pro \u00fahel v\u00fd\u0161ky (\u00fahel mezi stylusem a obrazovkou) a azimutu (\u00fahel mezi osou X a projekc\u00ed stylusu na obrazovce) pro stanoven\u00ed sklonu stylusu*, nam\u00edsto \u00fahl\u016f TiltX a TiltY (\u00fahly mezi rovinou stylusu a jednou z os a rovinou os Y a Z). Byly tak\u00e9 p\u0159id\u00e1ny funkce pro p\u0159evod mezi v\u00fd\u0161kou\/azimutem a TiltX\/TiltY.<\/li>\n<li> Bylo zm\u011bn\u011bno k\u00f3dov\u00e1n\u00ed mezery v URL p\u0159i jej\u00edm vyhodnocov\u00e1n\u00ed v protokolech &#8212; metoda navigator.registerProtocolHandler() nyn\u00ed nahrazuje mezery &#171;&#187; m\u00edsto &#171;+&#187;, co\u017e zjednodu\u0161uje chov\u00e1n\u00ed s jin\u00fdmi prohl\u00ed\u017ee\u010di, jako je Firefox.<\/li>\n<li> Do CSS byl p\u0159id\u00e1n pseudo-element \"::marker\", kter\u00fd umo\u017e\u0148uje nastavit barvu, velikost, tvar a typ \u010d\u00edsel a te\u010dek pro v\u00fd\u010dty v bloc\u00edch <ul> a <ol>.<\/li>\n<li> Byla p\u0159id\u00e1na podpora HTTP hlavi\u010dky Document-Policy, kter\u00e1 umo\u017e\u0148uje nastavit pravidla p\u0159\u00edstupu k dokument\u016fm, podobn\u011b jako mechanismus sandboxov\u00e9ho izola\u010dn\u00edho pro iframe, ale univerz\u00e1ln\u011bj\u0161\u00ed. Nap\u0159\u00edklad pomoc\u00ed Document-Policy lze omezit pou\u017e\u00edv\u00e1n\u00ed nekvalitn\u00edch obr\u00e1zk\u016f, zak\u00e1zat pomal\u00e9 JavaScript API, nastavit pravidla na\u010d\u00edt\u00e1n\u00ed iframe, obr\u00e1zk\u016f a skript\u016f, omezit celkovou velikost dokumentu a provoz, zak\u00e1zat metody vedouc\u00ed k p\u0159erenderov\u00e1n\u00ed str\u00e1nky a vypnout funkci Scroll-To-Text.<\/li>\n<li> Do prvku <fieldset> byla p\u0159id\u00e1na podpora parametr\u016f \u2018inline-grid\u2019, \u2018grid\u2019, \u2018inline-flex\u2019 a \u2018flex\u2019, definovan\u00fdch prost\u0159ednictv\u00edm CSS vlastnosti \u2018display\u2019.<\/li>\n<li> Byl p\u0159id\u00e1n metod ParentNode.replaceChildren() pro nahrazen\u00ed v\u0161ech potomk\u016f rodi\u010dovsk\u00e9ho uzlu jin\u00fdm DOM uzlem. D\u0159\u00edve bylo mo\u017en\u00e9 pro nahrazen\u00ed uzl\u016f pou\u017e\u00edt kombinaci metod node.removeChild() a node.append() nebo node.innerHTML a node.append().<\/li>\n<li> Roz\u0161\u00ed\u0159il se rozsah sch\u00e9mat URL, kter\u00e1 lze p\u0159epsat pomoc\u00ed registerProtocolHandler(). Mezi zahrnut\u00e9 sch\u00e9mata pat\u0159\u00ed decentralizovan\u00e9 protokoly cabal, dat, did, dweb, ethereum, hyper, ipfs, ipns a ssb, co\u017e umo\u017e\u0148uje definovat odkazy na prvky bez ohledu na web nebo br\u00e1nu, kter\u00e1 poskytuje p\u0159\u00edstup k zdroji.<\/li>\n<li> V API Asynchronous Clipboard byla p\u0159id\u00e1na podpora form\u00e1tu text\/html pro kop\u00edrov\u00e1n\u00ed a vkl\u00e1d\u00e1n\u00ed HTML p\u0159es schr\u00e1nku (b\u011bhem z\u00e1pisu a \u010dten\u00ed do schr\u00e1nky se prov\u00e1d\u00ed \u010di\u0161t\u011bn\u00ed nebezpe\u010dn\u00fdch HTML konstrukc\u00ed). Tato zm\u011bna nap\u0159\u00edklad umo\u017e\u0148uje organiza\u010dn\u00ed vlo\u017een\u00ed a kop\u00edrov\u00e1n\u00ed form\u00e1tovan\u00e9ho textu se obr\u00e1zky a odkazy v webov\u00fdch editorech.<\/li>\n<li> Ve WebRTC byla p\u0159id\u00e1na mo\u017enost p\u0159ipojov\u00e1n\u00ed vlastn\u00edch zpracovatel\u016f dat, kter\u00e9 se spou\u0161t\u011bj\u00ed b\u011bhem k\u00f3dov\u00e1n\u00ed nebo dek\u00f3dov\u00e1n\u00ed WebRTC MediaStreamTrack. Tuto funkci je mo\u017en\u00e9 nap\u0159\u00edklad vyu\u017e\u00edt k p\u0159id\u00e1n\u00ed podpory pro end-to-end \u0161ifrov\u00e1n\u00ed dat, kter\u00e1 jsou p\u0159ed\u00e1v\u00e1na p\u0159es zprost\u0159edkovatelsk\u00e9 servery.<br \/>\nV JavaScriptov\u00e9m enginu V8 byla implementace Number.prototype.toString zrychlena o 75%. Do asynchronn\u00edch t\u0159\u00edd bylo p\u0159id\u00e1no vlastnost .name s pr\u00e1zdnou hodnotou. Byla odstran\u011bna metoda Atomics.wake, kter\u00e1 byla d\u0159\u00edve p\u0159ejmenov\u00e1na na Atomics.notify kv\u016fli souladu se specifikac\u00ed ECMA-262. Byl zve\u0159ejn\u011bn k\u00f3d n\u00e1stroje pro fuzzing testov\u00e1n\u00ed JS-Fuzzer.<\/li>\n<li> Ve v minulosti pou\u017eit\u00e9m po\u010d\u00e1te\u010dn\u00edm (baseline) p\u0159eklada\u010di Liftoff pro WebAssembly byla p\u0159id\u00e1na mo\u017enost vyu\u017eit\u00ed vektorov\u00fdch instrukc\u00ed SIMD pro urychlen\u00ed v\u00fdpo\u010dt\u016f. Podle test\u016f tato optimalizace vedla k 2.8n\u00e1sobn\u00e9mu zrychlen\u00ed n\u011bkter\u00fdch test\u016f. Dal\u0161\u00ed optimalizace umo\u017enila v\u00fdznamn\u011b urychlit vol\u00e1n\u00ed funkc\u00ed JavaScriptu importovan\u00fdch z WebAssembly.<\/li>\n<li> Byly roz\u0161\u00ed\u0159eny n\u00e1stroje pro webov\u00e9 v\u00fdvoj\u00e1\u0159e: Do panelu Media byly p\u0159id\u00e1ny informace o p\u0159ehr\u00e1va\u010d\u00edch pou\u017e\u00edvan\u00fdch pro p\u0159ehr\u00e1v\u00e1n\u00ed videa na str\u00e1nce, v\u010detn\u011b informac\u00ed o ud\u00e1lostech, log\u016f, hodnot vlastnost\u00ed a parametr\u016f dek\u00f3dov\u00e1n\u00ed sn\u00edmk\u016f (nap\u0159\u00edklad je mo\u017en\u00e9 zjistit p\u0159\u00ed\u010diny ztr\u00e1ty sn\u00edmk\u016f a probl\u00e9my p\u0159i interakci z JavaScriptu).<\/li>\n<li> V kontextov\u00e9m menu panelu Elements byla p\u0159id\u00e1na mo\u017enost vytv\u00e1\u0159en\u00ed sn\u00edmk\u016f vybran\u00e9ho prvku (nap\u0159\u00edklad m\u016f\u017eete vytvo\u0159it sn\u00edmek obsahu nebo tabulky).<\/li>\n<li> V webov\u00e9 konzoli byla panel s upozorn\u011bn\u00edm na probl\u00e9my nahrazena b\u011b\u017enou zpr\u00e1vou, a probl\u00e9my se t\u0159et\u00edmi stranami Cookies jsou standardn\u011b skryty na z\u00e1lo\u017ece Issues, p\u0159i\u010dem\u017e se aktivuj\u00ed speci\u00e1ln\u00edm za\u0161krt\u00e1vac\u00edm tla\u010d\u00edtkem.<\/li>\n<li> Na kart\u011b Rendering p\u0159id\u00e1no tla\u010d\u00edtko &#171;Disable local fonts&#187;, kter\u00e9 umo\u017e\u0148uje simulovat absenci m\u00edstn\u00edch p\u00edsem, a na kart\u011b Sensors byla p\u0159id\u00e1na mo\u017enost simulovat neaktivity u\u017eivatele (pro aplikace vyu\u017e\u00edvaj\u00edc\u00ed API Idle Detection).<\/li>\n<li> Na panelu Application jsou poskytov\u00e1ny podrobn\u00e9 informace o ka\u017ed\u00e9m iframe, otev\u0159en\u00e9m okn\u011b a pop-up oknech, v\u010detn\u011b \u00fadaj\u016f o izolaci Cross-Origin pomoc\u00ed COEP a COOP.<\/li>\n<\/ul>\n<p>Za\u010dala v\u00fdm\u011bna implementace protokolu QUIC za variantu vyv\u00edjenou v specifikaci IETF, nam\u00edsto Google verze QUIC.<br \/>\nKrom\u011b novinek a oprav chyb byla v nov\u00e9 verzi odstran\u011bna 35 zranitelnost\u00ed. Mnoho z t\u011bchto zranitelnost\u00ed bylo identifikov\u00e1no pomoc\u00ed automatizovan\u00e9ho testov\u00e1n\u00ed n\u00e1stroji AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer a AFL. Jedna zranitelnost (CVE-2020-15967, p\u0159\u00edstup k uvoln\u011bn\u00e9 oblasti pam\u011bti v k\u00f3du pro interakci s Google Payments) je ozna\u010dena jako kritick\u00e1, tj. umo\u017e\u0148uje obej\u00edt v\u0161echny \u00farovn\u011b ochrany prohl\u00ed\u017ee\u010de a vykonat k\u00f3d v syst\u00e9mu mimo sandboxov\u00e9 prost\u0159ed\u00ed. V r\u00e1mci programu vypl\u00e1cen\u00ed finan\u010dn\u00edch odm\u011bn za nalezen\u00ed zranitelnost\u00ed pro tuto verzi spole\u010dnost Google vyplatila 27 odm\u011bn v celkov\u00e9 v\u00fd\u0161i 71500 dolar\u016f (jedna odm\u011bna 15000 $, t\u0159i odm\u011bny 7500 $, p\u011bt odm\u011bn 5000 $, dv\u011b 3000 $, jedna 200 $ a dv\u011b odm\u011bny 500 $). Velikost 13 odm\u011bn zat\u00edm nebyla ur\u010dena.<\/p>\n<p><noindex><\/p>\n<p>Z\u00edsk\u00e1no z <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53846\">Opennet.ru<\/a><\/p>\n<p><\/noindex><\/p>\n<p>Zdroj: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"http:\/\/www.linux.org.ru\/news\/google\/15935426\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u044b\u0448\u0435\u043b \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0440\u0435\u043b\u0438\u0437 Chrome 86 \u0438 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a Chromium. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 Chrome 86: \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0444\u043e\u0440\u043c \u0432\u0432\u043e\u0434\u0430 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445, \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u043e HTTPS, \u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e HTTP. \u0411\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 (http) \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u043e\u0439 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0430\u0440\u0445\u0438\u0432\u043e\u0432 (zip, iso \u0438 \u0442.\u043f.) \u0438 \u0432\u044b\u0432\u043e\u0434\u043e\u043c \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u043f\u0440\u0438 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 (docx, pdf \u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-96168","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u044b\u0448\u0435\u043b \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0440\u0435\u043b\u0438\u0437 Chrome 86 \u0438 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a Chromium.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/chrome-86\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Chrome 86 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u044b\u0448\u0435\u043b \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0440\u0435\u043b\u0438\u0437 Chrome 86 \u0438 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a Chromium.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/chrome-86\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-08T23:41:57+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-08T23:41:57+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Chrome 86 | ProHoster","description":"Byla vyd\u00e1na dal\u0161\u00ed verze Chrome 86 a stabiln\u00ed vyd\u00e1n\u00ed Chromium.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/chrome-86","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Chrome 86 | ProHoster","og:description":"\u0412\u044b\u0448\u0435\u043b \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0440\u0435\u043b\u0438\u0437 Chrome 86 \u0438 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a Chromium.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/chrome-86","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-08T23:41:57+00:00","article:modified_time":"2020-10-08T23:41:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"96168","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:51:00","updated":"2022-09-29 07:23:28","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/96168","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=96168"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/96168\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=96168"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=96168"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=96168"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}