{"id":39042,"date":"2019-10-31T22:27:33","date_gmt":"2019-10-31T19:27:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome\/"},"modified":"2019-10-31T22:27:33","modified_gmt":"2019-10-31T19:27:33","slug":"usilenie-izolyatsii-mezhdu-sajtami-v-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome","title":{"rendered":"Forst\u00e6rkning af isolationen mellem websider i Chrome","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google har annonceret<\/a><\/noindex> om styrkelse i Chrome-tilstand til website-isolering<\/a><\/noindex>, som muligg\u00f8r behandling af sider fra forskellige websites i separate isolerede processer. Isoleringsmodus p\u00e5 websites-niveau hj\u00e6lper med at beskytte brugeren mod angreb, der kan udf\u00f8res via eksterne blocks som iframe-inds\u00e6ttelser, eller til at forhindre datal\u00e6kage gennem indlejring af legitime blocks (f.eks. med foresp\u00f8rgsler til banktjenester, hvor brugeren kan v\u00e6re autentificeret) p\u00e5 ondsindede websites.<\/p>\n

Ved at adskille h\u00e5ndtererne i tilknytning til dom\u00e6ner, opbevares data kun fra \u00e9t website i hver proces, hvilket g\u00f8r det sv\u00e6rt at udf\u00f8re angreb rettet mod mellem-websteders datagenerering. I desktop-versionerne af Chrome adskillelsen<\/a><\/noindex> af h\u00e5ndterere relateret til dom\u00e6ner og ikke faner, er implementeret siden Chrome 67<\/a><\/noindex>. I Chrome 77<\/a><\/noindex> blev en lignende tilstand aktiveret ogs\u00e5 for Android-platformen.
\n

\"Forst\u00e6rkning<\/a><\/noindex><\/center><\/p>\n

For at reducere overhead, aktiveres website-isoleringstilstand i Android kun, hvis der er registreret en login via password p\u00e5 siden. Chrome husker faktum om brugen af password og aktiverer beskyttelse for alle efterf\u00f8lgende bes\u00f8g p\u00e5 website. Beskyttelsen anvendes ogs\u00e5 straks til en favoritliste over forudbestemte websites, der er popul\u00e6re blandt mobilbrugere. Den selektive aktiveringsmetode og tilf\u00f8jede optimiseringer har gjort det muligt at holde v\u00e6ksten i hukommelsesanvendelse p\u00e5 grund af det \u00f8gede antal k\u00f8rende processer p\u00e5 gennemsnitlig 3-5%, i stedet for 10-13%, der observeres ved aktivering af isolering for alle websites.<\/p>\n

Den nye isoleringsmode er blevet aktiveret for 99% af Chrome 77-brugere p\u00e5 Android-enheder, der har mindst 2 GB RAM (for 1% af brugerne er mode stadig deaktiveret for at overv\u00e5ge ydeevnen). Du kan manuelt aktivere eller deaktivere sites isoleringsmode via indstillingen «chrome:\/\/flags\/#enable-site-per-process».<\/p>\n

I desktopversionen af Chrome er den ovenn\u00e6vnte sites isolationstilstand nu forbedret for at modst\u00e5 angreb, der sigter mod fuld kompromittering af processen med indholdsh\u00e5ndtereren. Den forbedrede isolationstilstand vil beskytte data fra websteder mod to yderligere trusler: datal\u00e6kager som f\u00f8lge af angreb gennem sidel\u00f8bende kanaler, s\u00e5som Spectre, samt l\u00e6kager efter fuld kompromittering af indholdsh\u00e5ndteringsprocessen ved succesfuld udnyttelse af s\u00e5rbarheder, der giver kontrol over processen, men som ikke er tilstr\u00e6kkelige til at omg\u00e5 sandbox-isolationen. I Chrome til Android vil en lignende beskyttelse blive tilf\u00f8jet senere. <\/p>\n

Essensen af metoden er, at styreprocessen husker, hvilket website arbejdsprocessen har adgang til og forbyder adgang til andre websteder, selvom en angriber f\u00e5r kontrol over processen og fors\u00f8ger at tilg\u00e5 ressourcerne fra et andet site. Begr\u00e6nsningerne d\u00e6kker ressourcer relateret til autentificering (gemte adgangskoder og cookies), data der hentes direkte over netv\u00e6rket (filtreres og knyttes til det aktuelle websites HTML, XML, JSON, PDF og andre filtyper), data i interne lagre (localStorage), bef\u00f8jelser (givne tilladelser til sitet for adgang til mikrofon osv.) og meddelelser der overf\u00f8res via API postMessage og BroadcastChannel. Alle s\u00e5danne ressourcer knyttes med en m\u00e6rkat til det oprindelige website og kontrolleres af styreprocessen for muligheden for overf\u00f8ring p\u00e5 anmodning fra arbejdsprocessen.<\/p>\n

Af de relaterede begivenheder med Chrome kan ogs\u00e5 n\u00e6vnes start<\/a><\/noindex> bekr\u00e6ftelsen af inkorporeringen af funktionaliteten i Chrome Scroll-To-Text<\/a><\/noindex>, hvilket giver mulighed for at danne links til enkelte ord eller s\u00e6tninger uden eksplicit at angive m\u00e6rker i dokumentet med tag «a name» eller egenskab «id». Syntaksen for s\u00e5danne links planl\u00e6gges at blive godkendt som webstandard, som stadig er i draft<\/a><\/noindex>. Overgangsmasken (som i bund og grund udf\u00f8rer en s\u00f8gning med rullefunktion) adskilles fra den almindelige anker ved m\u00e6rket «:~:». For eksempel, n\u00e5r du \u00e5bner linket «https:\/\/opennet.ru\/51702\/#:~:text=Chrom\u0435», vil siden rulle til det f\u00f8rste n\u00e6vnte ord «Chrom\u0435» og dette ord vil blive fremh\u00e6vet. Muligheden er tilf\u00f8jet i grenen Canary<\/a><\/noindex>, men kr\u00e6ver aktivering med flaget «—enable-blink-features=TextFragmentIdentifiers».<\/p>\n

En anden interessant kommende \u00e6ndring i Chrome Baggrunden indeholder tekstur af siden og illustrationer, og dens opl\u00f8sning er lavere end maskens. Baggrunden gemmes tabsl\u00f8st for opfattelse med en opl\u00f8sning p\u00e5 100 dpi.<\/a><\/noindex> muligheden for at fryse inaktive faner, der automatisk kan afl\u00e6sse faner fra hukommelsen, som har v\u00e6ret i baggrundstilstand i mere end 5 minutter og ikke udf\u00f8rer nogen v\u00e6sentlige handlinger. Beslutningen om, hvorvidt en given fane er egnet til at fryse, tr\u00e6ffes p\u00e5 baggrund af heuristik. \u00c6ndringen er tilf\u00f8jet i Canary-grenen, hvorfra der vil blive dannet en udgave af Chrome 79, og aktiveres via flaget «chrome:\/\/flags\/#proactive-tab-freeze».<\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0438 \u0432 Chrome \u0440\u0435\u0436\u0438\u043c\u0430 \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0441 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u0445. \u0420\u0435\u0436\u0438\u043c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0430\u0439\u0442\u043e\u0432 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043e\u0442 \u0430\u0442\u0430\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u0431\u043b\u043e\u043a\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a iframe-\u0432\u0441\u0442\u0430\u0432\u043a\u0438, \u0438\u043b\u0438 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u0435 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u0431\u043b\u043e\u043a\u043e\u0432 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29290,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-39042","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Styrkelse af isolation mellem websteder i Chrome | ProHoster","description":"Google har annonceret en styrkelse af tilstanden i Chrome","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0441\u0438\u043b\u0435\u043d\u0438\u0435 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u0441\u0430\u0439\u0442\u0430\u043c\u0438 \u0432 Chrome | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0438 \u0432 Chrome \u0440\u0435\u0436\u0438\u043c\u0430","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:27:33+00:00","article:modified_time":"2019-10-31T19:27:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"39042","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 00:31:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:58:37","updated":"2026-01-24 00:31:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/39042","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=39042"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/39042\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/29290"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=39042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=39042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=39042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}