Chrome zai fara toshe zazzagewar fayil ta HTTP

Google aka buga wani shiri don ƙara sabbin hanyoyin kariya daga zazzagewar fayil mara aminci a cikin Chrome. A cikin Chrome 86, wanda aka shirya don fitarwa a ranar 26 ga Oktoba, zazzage kowane nau'in fayiloli ta hanyar haɗin yanar gizo daga shafukan da aka buɗe ta HTTPS zai yiwu ne kawai idan ana amfani da fayilolin ta amfani da ka'idar HTTPS. An lura cewa zazzage fayiloli ba tare da ɓoyewa ba za a iya amfani da su don aiwatar da munanan ayyuka ta hanyar sauya abun ciki yayin harin MITM (misali, malware da ke kai hari a gida na iya maye gurbin aikace-aikacen da aka zazzage ko shiga cikin takaddun sirri).

Za a aiwatar da toshewar a hankali, farawa tare da sakin Chrome 82, inda za a fara ba da gargaɗi lokacin da ake ƙoƙarin zazzage fayilolin da za a iya aiwatarwa ba tare da tsaro ba ta hanyar haɗin yanar gizo daga shafukan HTTPS. A cikin Chrome 83, za a kunna toshewa don fayilolin da za a iya aiwatarwa, kuma za a fara ba da gargaɗi don adana kayan tarihi. Chrome 84 zai ba da damar toshe kayan tarihin da gargaɗin takardu. A cikin Chrome 85, za a toshe takardu kuma gargadi zai fara bayyana don saukar da hotuna, bidiyo, sauti, da rubutu marasa tsaro, waɗanda za a fara toshewa a cikin Chrome 86.

Chrome zai fara toshe zazzagewar fayil ta HTTP

A nan gaba mai nisa, akwai tsare-tsare don dakatar da goyan bayan loda fayilolin gaba ɗaya ba tare da ɓoyewa ba. A cikin sakewa don Android da iOS, toshewar za a aiwatar da shi tare da raguwar sakin daya (maimakon Chrome 82 - a cikin 83, da sauransu). A cikin Chrome 81, zaɓi "chrome://flags/#treat-unsafe-downloads-as-active-content" zai bayyana a cikin saitunan, wanda zai ba ku damar kunna gargadi ba tare da jiran Chrome 82 ya fito ba.

Chrome zai fara toshe zazzagewar fayil ta HTTP

source: budenet.ru

Add a comment