{"id":39042,"date":"2019-10-31T22:27:33","date_gmt":"2019-10-31T19:27:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome\/"},"modified":"2019-10-31T22:27:33","modified_gmt":"2019-10-31T19:27:33","slug":"usilenie-izolyatsii-mezhdu-sajtami-v-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome","title":{"rendered":"Strengthening isolation between sites in Chrome","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google Inc. announced<\/a><\/noindex> about enhancing the mode in Chrome site isolation<\/a><\/noindex>, which ensures that pages from different sites are processed in separate isolated processes. Site-level isolation helps protect users from attacks that may occur through third-party blocks used on a site, such as iframe embeds, or prevents data leakage through the embedding of legitimate blocks (e.g., requests to banking services where the user may be authenticated) on malicious websites.<\/p>\n

When separating handlers bound to a domain, each process contains data from only one site, making it difficult to carry out attacks aimed at cross-site data capture. In the desktop versions of Chrome separation<\/a><\/noindex> handlers bound to the domain, rather than the tab, were implemented starting with Chrome 67<\/a><\/noindex>. In Chrome 77<\/a><\/noindex> this mode was activated for the Android platform as well.
\n

\"Strengthening<\/a><\/noindex><\/center><\/p>\n

To reduce overhead, the site isolation mode on Android is activated only if a password login is detected on the page. Chrome remembers the use of the password and engages protection for all subsequent accesses to the site. Protection is also applied immediately for a predefined list of sites popular among mobile users. The selective activation method and added optimizations allowed memory consumption growth due to the increased number of active processes to remain at an average level of 3-5%, instead of the 10-13% observed when enabling isolation for all sites.<\/p>\n

The new isolation mode has been activated for 99% of Chrome 77 users on Android devices with at least 2 GB of RAM (the mode remains disabled for 1% of users for performance monitoring). You can enable or disable the site isolation mode manually through the setting 'chrome:\/\/flags\/#enable-site-per-process'.<\/p>\n

In the desktop version of Chrome, the aforementioned site isolation mode has now been enhanced to counter attacks aimed at fully compromising the content handler process. The improved isolation mode will protect site data from two additional types of threats: data leaks resulting from side-channel attacks, such as Spectre, and leaks after complete compromise of the handler process when vulnerabilities are successfully exploited that allow control over the process but are insufficient to bypass sandbox isolation. Similar protection will be added to Chrome for Android later. <\/p>\n

The essence of the method is that the controlling process remembers which site the worker process has access to and prohibits access to other sites, even if an attacker gains control over the process and tries to access resources from another site. The restrictions cover resources related to authentication (stored passwords and Cookies), data directly loaded over the network (filtered and tied to the current site's HTML, XML, JSON, PDF, and other file types), data in internal storage (localStorage), permissions (granted site access to the microphone, etc.), and messages transmitted through the postMessage and BroadcastChannel APIs. All such resources are labeled with the source site and checked by the controlling process for the ability to transfer upon request from the worker process.<\/p>\n

From the Chrome-related events, it is also worth noting the beginning<\/a><\/noindex> the proposed inclusion of support for the feature in Chrome Scroll-To-Text<\/a><\/noindex>, allowing the creation of links to individual words or phrases without explicitly marking them in the document using the 'a name' tag or 'id' property. The syntax for such links is planned to be approved as a web standard, which is currently at the stage draft<\/a><\/noindex>. The transition mask (essentially a scroll-based search) is separated from a regular anchor by the ':~:' identifier. For example, when opening the link 'https:\/\/opennet.ru\/51702\/#:~:text=Chrom\u0435', the page will scroll to the position of the first mention of the word 'Chrom\u0435', and this word will be highlighted. This feature has been added to the branch Canary<\/a><\/noindex>, but requires launching with the flag '--enable-blink-features=TextFragmentIdentifiers' to enable.<\/p>\n

Another interesting upcoming change in Chrome is<\/a><\/noindex> the ability to freeze inactive tabs, allowing automatic unloading from memory tabs that have been in the background for more than 5 minutes and are not performing significant actions. The decision on the suitability of a particular tab for freezing is made based on heuristics. This change has been added to the Canary branch, from which Chrome 79 will be released, and can be enabled through the flag 'chrome:\/\/flags\/#proactive-tab-freeze'.<\/p>\n

<\/a><\/noindex><\/p>\n

Source: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0438 \u0432 Chrome \u0440\u0435\u0436\u0438\u043c\u0430 \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0441 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u0445. \u0420\u0435\u0436\u0438\u043c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0430\u0439\u0442\u043e\u0432 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043e\u0442 \u0430\u0442\u0430\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u0431\u043b\u043e\u043a\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a iframe-\u0432\u0441\u0442\u0430\u0432\u043a\u0438, \u0438\u043b\u0438 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u0435 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u0431\u043b\u043e\u043a\u043e\u0432 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29290,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-39042","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Enhanced isolation between sites in Chrome | ProHoster","description":"Google has announced an enhancement in Chrome mode","canonical_url":"https:\/\/prohoster.info\/en\/blog\/news\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0441\u0438\u043b\u0435\u043d\u0438\u0435 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u0441\u0430\u0439\u0442\u0430\u043c\u0438 \u0432 Chrome | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0438 \u0432 Chrome \u0440\u0435\u0436\u0438\u043c\u0430","og:url":"https:\/\/prohoster.info\/en\/blog\/news\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:27:33+00:00","article:modified_time":"2019-10-31T19:27:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"39042","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 00:31:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:58:37","updated":"2026-01-24 00:31:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/39042","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=39042"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/39042\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/29290"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=39042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=39042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=39042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}