{"id":39042,"date":"2019-10-31T22:27:33","date_gmt":"2019-10-31T19:27:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome\/"},"modified":"2019-10-31T22:27:33","modified_gmt":"2019-10-31T19:27:33","slug":"usilenie-izolyatsii-mezhdu-sajtami-v-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome","title":{"rendered":"Veebisaitide vahelise isoleerimise tugevdamine Chrome'is.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google teatas<\/a><\/noindex> Chrome'i re\u017eiimi tugevdamisest saidisisese isolatsiooni<\/a><\/noindex>, mis tagab erinevate saitide lehtede t\u00f6\u00f6tlemise eraldi isoleeritud protsessides. Saidisisese isolatsiooni re\u017eiim kaitseb kasutajat r\u00fcnnakute eest, mis v\u00f5ivad tulla saidil kasutatavate kolmandate osapoolte komponentide, nagu iframe'i sisestused, kaudu, v\u00f5i et v\u00e4ltida andmete lekimist legitiimsete komponentide (n\u00e4iteks pangateenuste p\u00e4ringute, millel kasutaja v\u00f5ib olla autentinud) kaudu pahatahtlikel saitidel.<\/p>\n

Domeenip\u00f5hine t\u00f6\u00f6tlejate jagamine teeb iga protsessi jaoks kergemaks andmeid vaid \u00fche saidi puhul, mis raskendab andmete ristisissetungi r\u00fcnnakute korraldamist. Chrome'i lauaversioonides jaotamine<\/a><\/noindex> t\u00f6\u00f6tlejate j\u00e4rgi domeeni, mitte vahtkonna alusel, on rakendatud alates Chrome 67<\/a><\/noindex>. Samuti Chrome 77<\/a><\/noindex> oli sarnane re\u017eiim aktiveeritud ka Androidi platvormil.
\n

\"Veebisaitide<\/a><\/noindex><\/center><\/p>\n

S\u00fcsteemi t\u00f6\u00f6v\u00f5imetuse v\u00e4hendamiseks aktiveeritakse Androidi veebibrauseris saidi isolatsioonire\u017eiim ainult siis, kui lehe avamiseks on kasutatud parooli. Chrome m\u00e4letab parooli kasutamise fakti ja rakendab kaitset ka edasistele juurdep\u00e4\u00e4sudele saidile. Kaitse kehtib ka kohe eelnevalt m\u00e4\u00e4ratud lehtede j\u00e4rjehoidjate jaoks, mis on populaarsed mobiilseadmete kasutajate seas. Valikuline aktiveerimise meetod ja lisanduvad optimeerimised on v\u00f5imaldanud hoida m\u00e4lutarbimise kasvu 3\u20135% piires, v\u00f5rreldes 10\u201313% -ga, mida t\u00e4heldatakse, kui isolatsioon aktiveeritakse k\u00f5igi saitide jaoks.<\/p>\n

Uus eraldusre\u017eiim on aktiveeritud 99% Chrome 77 kasutajatest Android-seadmetes, millel on v\u00e4hemalt 2 GB RAM (1% kasutajatest j\u00e4\u00e4b re\u017eiim v\u00e4lja l\u00fclitatuks j\u00f5udluse j\u00e4lgimise jaoks). Eraldusre\u017eiimi saab k\u00e4sitsi sisse v\u00f5i v\u00e4lja l\u00fclitada seadetes «chrome:\/\/flags\/#enable-site-per-process».<\/p>\n

Chrome'i lauversioonis on \u00fclaltoodud saidi isoleerimise re\u017eiim n\u00fc\u00fcd tugevdatud, et vastu seista r\u00fcnnakutele, mille eesm\u00e4rk on t\u00e4ielik kompromiteerimine sisu t\u00f6\u00f6tlemise protsessis. Parendatud isoleerimisre\u017eiim kaitseb saidi andmeid kahte t\u00fc\u00fcpi lisaohtude eest: andmeleketest k\u00f5rvaliste kanalite r\u00fcnnakute t\u00f5ttu, nagu Spectre, ja lekkeid p\u00e4rast t\u00e4ielikku t\u00f6\u00f6tlemise protsessi kompromiteerimist, kui on edukalt \u00e4ra kasutatud haavatavusi, mis annavad protsessile kontrolli, kuid ei ole piisavad, et m\u00f6\u00f6da minna liivakasti isoleerimisest. Chrome'i Androidi versioonis lisatakse sarnane kaitse hiljem. <\/p>\n

Meetodi tuum on see, et haldurprotsess m\u00e4letab, millisele saidile t\u00f6\u00f6protsess p\u00e4\u00e4seda saab, ja keelab juurdep\u00e4\u00e4su teistele saiditele, isegi kui r\u00fcndaja saab protsessi kontrolli alla ja proovib saada juurdep\u00e4\u00e4su teise saidi ressurssidele. Piirangud katavad autentimisega seotud ressursid (salvestatud paroolid ja k\u00fcpsised), otse v\u00f5rgu kaudu laaditavad andmed (filtreeritakse ja seotakse jooksva saidi HTML, XML, JSON, PDF ja muude failit\u00fc\u00fcpidega), andmed sisehoidlatest (localStorage), volitused (saidile antud juurdep\u00e4\u00e4s mikrofoni jne) ja s\u00f5numid, mis edastatakse API postMessage ja BroadcastChannel kaudu. K\u00f5ik sellised ressursid on seotud algse saidiga m\u00e4rgisega ja kontrollitakse haldurprotsessi poolt v\u00f5imaluse osas edastamiseks t\u00f6\u00f6protsessist.<\/p>\n

Chrome'iga seotud s\u00fcndmustest v\u00f5ib samuti m\u00e4rkida algus<\/a><\/noindex> kinnitust Chrome'i toe kaasamiseks funktsioonile Scroll-To-Text<\/a><\/noindex>, mis v\u00f5imaldab luua linke \u00fcksikutele s\u00f5nadele v\u00f5i fraasidele, ilma et dokumenti oleks selges\u00f5naliselt lisatud silte «a name» v\u00f5i omadust «id». Taolist linkide s\u00fcntaksit plaanitakse kinnitada veebistandardiks, mis on hetkel veel mustandiga<\/a><\/noindex>. \u00dchendusmask (mille puhul toimub sisuliselt kerimine otsinguga) eristatakse tavalisest ankrust m\u00e4rgiga «:~:». N\u00e4iteks, kui avada link «https:\/\/opennet.ru\/51702\/#:~:text=Chrom\u0435», nihkub leht positsioonile, kus on esimene viidatud s\u00f5na «Chrom\u0435» ja see s\u00f5na on esile toodud. See v\u00f5imalus on lisatud haru Canary<\/a><\/noindex>, kuid selle aktiveerimiseks on vajalik k\u00e4ivitamine lipuga «—enable-blink-features=TextFragmentIdentifiers».<\/p>\n

Teine huvitav tuleviku muudatus Chromes on<\/a><\/noindex> v\u00f5ime k\u00fclmutada mitteaktiivseid vahekaarte, mis v\u00f5imaldab automaatselt m\u00e4lu vabastada vahekaardid, mis on olnud taustal \u00fcle 5 minuti ja ei tee olulisi toiminguid. Otsus, kas vahekaart on k\u00fclmutamiseks sobiv, m\u00e4\u00e4ratakse heuristika alusel. Muudatus on lisatud harusse Canary, mille alusel luuakse Chrome 79 v\u00e4ljaanne, ning see aktiveeritakse lipuga «chrome:\/\/flags\/#proactive-tab-freeze».<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0438 \u0432 Chrome \u0440\u0435\u0436\u0438\u043c\u0430 \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0441 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u0445. \u0420\u0435\u0436\u0438\u043c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0430\u0439\u0442\u043e\u0432 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043e\u0442 \u0430\u0442\u0430\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u0431\u043b\u043e\u043a\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a iframe-\u0432\u0441\u0442\u0430\u0432\u043a\u0438, \u0438\u043b\u0438 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u0435 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u0431\u043b\u043e\u043a\u043e\u0432 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29290,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-39042","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Veebisaitide vahelise isolatsiooni tugevdamine Chromes | ProHoster","description":"Google teatas Chrome'i re\u017eiimi tugevdamisest","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0441\u0438\u043b\u0435\u043d\u0438\u0435 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u0441\u0430\u0439\u0442\u0430\u043c\u0438 \u0432 Chrome | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0438 \u0432 Chrome \u0440\u0435\u0436\u0438\u043c\u0430","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:27:33+00:00","article:modified_time":"2019-10-31T19:27:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"39042","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 00:31:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:58:37","updated":"2026-01-24 00:31:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/39042","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=39042"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/39042\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/29290"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=39042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=39042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=39042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}