{"id":39042,"date":"2019-10-31T22:27:33","date_gmt":"2019-10-31T19:27:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome\/"},"modified":"2019-10-31T22:27:33","modified_gmt":"2019-10-31T19:27:33","slug":"usilenie-izolyatsii-mezhdu-sajtami-v-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome","title":{"rendered":"Veebilehtede vahelise isoleerimise tugevdamine Chrome'is","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google'i ettev\u00f5te teatas<\/a><\/noindex> Chrome'i re\u017eiimi tugevdamine veebisaitide isolatsioon<\/a><\/noindex>, mis tagab lehtede t\u00f6\u00f6tlemise eri saitidelt eraldi isoleeritud protsessides. Veebisaitide isolatsioonitase kaitseb kasutajat r\u00fcnnakute eest, mis v\u00f5ivad toimuda kolmandate osapoolte komponentide, nagu iframe'i sisestuste, kaudu, v\u00f5i takistab andmete leket, kui legitiimsed osad (n\u00e4iteks pangateenustele p\u00f6\u00f6rdumised, kus kasutaja v\u00f5ib olla autentitud) on kuritegelikel saitidel.<\/p>\n

Domeenile seotud t\u00f6\u00f6tlejate eraldamisel on igas protsessis ainult \u00fche saidi andmed, mis muudab andmete vahelesegamise r\u00fcnnakute teostamise keerulisemaks. Desktopi Chrome'i versioonides ligip\u00e4\u00e4su<\/a><\/noindex> domeenile seotud t\u00f6\u00f6tlejate puhul, mitte vahelehtedel, on rakendatud alates Chrome 67<\/a><\/noindex>. Samuti Chrome 77<\/a><\/noindex> oli sarnane re\u017eiim aktiveeritud ka Android-platvormil.
\n

\"Veebilehtede<\/a><\/noindex><\/center><\/p>\n

Kulude v\u00e4hendamiseks l\u00fclitatakse Androidis veebisaitide isolatsioonire\u017eiim sisse ainult siis, kui lehelt on fikseeritud sisselogimine parooli abil. Chrome salvestab parooli kasutamise ja rakendab kaitset k\u00f5igi edasiste saidi k\u00fclastuste jaoks. Kaitse kehtib ka kohe eelistatud lehtede nimekirja suhtes, mis on mobiilseadmete kasutajate seas populaarsed. Valikuline aktiveerimismeetod ja lisatud optimeerimised on v\u00f5imaldanud hoida m\u00e4lutarbimise kasvu, mis tuleneb t\u00f6\u00f6tavate protsesside arvu suurenemisest, keskmiselt 3-5% tasemel, v\u00f5rreldes 10-13%-ga, mis t\u00e4heldatakse isolatsiooni aktiveerimisel k\u00f5igi saitide jaoks.<\/p>\n

Uus isolatsioonire\u017eiim on aktiveeritud 99% Chrome 77 kasutajatest Android-seadmetes, millel on v\u00e4hemalt 2 GB RAM (1% kasutajatest on re\u017eiim endiselt v\u00e4lja l\u00fclitatud j\u00f5udluse j\u00e4lgimise jaoks). Saate k\u00e4sitsi lubada v\u00f5i lubada saidi isolatsiooni re\u017eiimi seadete kaudu «chrome:\/\/flags\/#enable-site-per-process».<\/p>\n

Chrome'i lauaversioonis on \u00fclalmainitud saidi isolatsioonire\u017eiim n\u00fc\u00fcd tugevdatud, et vastupanu osutada r\u00fcnnakutele, mis on suunatud sisu protsessi t\u00e4ielikule kompromiteerimisele. Parendatud isolatsioonire\u017eiim kaitseb saidi andmeid kahte lisarohtu eest: andmete leket kolmandate osaliste r\u00fcnnakute t\u00f5ttu, nagu Spectre, ning leket t\u00e4ieliku protsesside t\u00f6\u00f6tleja kompromiteerimise korral, kui haavatavuste kasutamine v\u00f5imaldab protsessi \u00fcle v\u00f5tta, kuid ei piisa, et m\u00f6\u00f6da minna liivakasti isolatsioonist. Androidi Chrome'is lisatakse sarnane kaitse hiljem. <\/p>\n

Meetodi olemus seisneb selles, et halduri protsess m\u00e4letab, millisele saidile t\u00f6\u00f6protsess p\u00e4\u00e4seb, ja keeldub juurdep\u00e4\u00e4sest teistele saitidele, isegi kui r\u00fcndaja on protsessi \u00fcle v\u00f5tnud ja p\u00fc\u00fcab saada juurdep\u00e4\u00e4su teise saidi ressurssidele. Piirangud katavad autentimisega seotud ressursid (salvestatud paroolid ja k\u00fcpsised), otse v\u00f5rgus allalaaditud andmed (filtreeritakse ja seotakse praeguse saidiga HTML, XML, JSON, PDF ja muu t\u00fc\u00fcpi failide kaudu), andmed sisemistes salvestustes (localStorage), volitused (saidile antud juurdep\u00e4\u00e4suload mikrofoni jne) ja s\u00f5numid, mis edastatakse postMessage'i ja BroadcastChannel'i kaudu. K\u00f5ik sellised ressursid seostatakse originaalsaidiga ja kontrollitakse halduri protsessi poolest, et tuvastada, kas neid saab t\u00f6\u00f6protsessist p\u00e4rida.<\/p>\n

Chrome'iga seotud s\u00fcndmuste hulgast v\u00f5ib samuti m\u00e4rkida esinev<\/a><\/noindex> kinnitust Chrome'i toetuse sissel\u00fclitamise kohta funktsioonile, Scroll-To-Text<\/a><\/noindex>, mis annab v\u00f5imaluse luua linke \u00fcksikutele s\u00f5nadele v\u00f5i fraasidele ilma dokumentides selgete siltide m\u00e4\u00e4ramiseta «a name» v\u00f5i «id» atribuudi kaudu. Selliste linkide s\u00fcntaks kavatsetakse kehtestada veebistandardina, mis on praeguses staadiumis mustand<\/a><\/noindex>. \u00dclemineku mask (t\u00f5epoolest toimub kerge otsing) eristatakse tavalisest ankrust s\u00fcmboliga «:~:». N\u00e4iteks kui avate lingi «https:\/\/opennet.ru\/51702\/#:~:text=Chrom\u0435», leht nihkub esimesest s\u00f5na «Chrom\u0435» mainimisest edasi ja see s\u00f5na on esile t\u00f5stetud. See v\u00f5imalus on lisatud harusse Canary<\/a><\/noindex>, kuid selle aktiveerimiseks on vajalik k\u00e4ivitamine lipuga «—enable-blink-features=TextFragmentIdentifiers».<\/p>\n

Teise huvitava tulevase muudatusena Chrome'is on<\/a><\/noindex> v\u00f5imalus k\u00fclmutada mitteaktiivsed vahekaardid, mis v\u00f5imaldab automaatselt vabastada m\u00e4lu vahekaartidest, mis on olnud taustal \u00fcle 5 minuti ning ei soorita olulisi toiminguid. Otsus, kas vahekaart on k\u00fclmutamiseks sobiv, tehakse heuristika p\u00f5hjal. Muudatus on lisatud Canary harusse, mille baasil koostatakse Chrome 79 versioon, ja selle aktiveerimiseks kasutatakse lippu «chrome:\/\/flags\/#proactive-tab-freeze».<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0438 \u0432 Chrome \u0440\u0435\u0436\u0438\u043c\u0430 \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0441 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u0445. \u0420\u0435\u0436\u0438\u043c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0430\u0439\u0442\u043e\u0432 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043e\u0442 \u0430\u0442\u0430\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u0431\u043b\u043e\u043a\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a iframe-\u0432\u0441\u0442\u0430\u0432\u043a\u0438, \u0438\u043b\u0438 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u0435 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u0431\u043b\u043e\u043a\u043e\u0432 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29290,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-39042","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Tugevdatud isolatsioon veebisaitide vahel Chrome'is | ProHoster","description":"Ettev\u00f5te Google teatas Chrome'i re\u017eiimi tugevdamisest","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0441\u0438\u043b\u0435\u043d\u0438\u0435 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u0441\u0430\u0439\u0442\u0430\u043c\u0438 \u0432 Chrome | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0438 \u0432 Chrome \u0440\u0435\u0436\u0438\u043c\u0430","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:27:33+00:00","article:modified_time":"2019-10-31T19:27:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"39042","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 00:31:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:58:37","updated":"2026-01-24 00:31:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/39042","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=39042"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/39042\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/29290"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=39042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=39042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=39042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}