Chrome da Safari sun cire ikon kashe sifa ta bin diddigin dannawa

Safari da masu bincike bisa tushen lambar Chromium sun cire zaɓuɓɓuka don kashe sifa ta "ping", wanda ke ba masu rukunin yanar gizon damar bin diddigin danna mahaɗin daga shafukansu. Idan kun bi hanyar haɗin yanar gizo kuma akwai sifa "ping=URL" a cikin alamar "a href", mai binciken yana kuma haifar da buƙatun POST zuwa URL da aka ƙayyade a cikin sifa, yana ba da bayanai game da canji ta hanyar HTTP_PING_TO.

A gefe guda, sifa ta "ping" tana haifar da zubar da bayanai game da ayyukan mai amfani a shafin, wanda za'a iya ɗauka a matsayin cin zarafin sirri, tunda a cikin alamar da aka nuna lokacin shawagi akan hanyar haɗin yanar gizo, mai binciken baya sanar da shi. mai amfani ta kowace hanya game da ƙarin aika bayanai kuma mai amfani baya duba lambar shafi ba zai iya tantance ko ana amfani da sifa ta “ping” ko a’a. A gefe guda, maimakon "ping" don waƙa da sauye-sauye, aikawa ta hanyar hanyar wucewa ko shiga tsakani tare da masu amfani da JavaScript za a iya amfani da su tare da nasara iri ɗaya; "ping" kawai yana sauƙaƙa ƙungiyar sa ido na canji. Bugu da ƙari, an ambaci "ping" a cikin ƙayyadaddun ƙayyadaddun ƙungiyar daidaita fasahar HTML5 WHATWG.

A cikin Firefox, goyan bayan sifa na “ping” yana nan, amma an kashe shi ta tsohuwa (browser.send_pings a game da: config). A cikin Chrome har zuwa saki 73, an kunna sifa ta "ping", amma yana yiwuwa a kashe ta ta hanyar "chrome://flags#disable-hyperlink-auditing" zaɓi. A cikin fitowar gwaji na Chrome na yanzu, an cire wannan tuta kuma an sanya sifa ta "ping" ta zama abin da ba a iya kashewa. Safari 12.1 kuma yana cire ikon kashe ping, wanda a baya akwai ta hanyar WebKit2HyperlinkAuditingEnabled zaɓi.

source: budenet.ru

Add a comment