Google ya bayyana sakin mai binciken gidan yanar gizo na Chrome 107. A lokaci guda kuma, ana samun tabbataccen sakin aikin Chromium kyauta, wanda ke zama tushen Chrome. Mai bincike na Chrome ya bambanta da Chromium wajen amfani da tambarin Google, kasancewar tsarin aika sanarwa idan ya faru, tsarin wasa don kunna abun ciki na bidiyo mai kariya (DRM), tsarin shigar da sabuntawa ta atomatik, yana ba da damar keɓe Sandbox ta dindindin. , ba da maɓallan Google API da watsa RLZ- lokacin bincika sigogi. Ga waɗanda ke buƙatar ƙarin lokaci don sabuntawa, reshen Ƙarfafa Stable yana da tallafi daban, sannan makonni 8 ya biyo baya. An shirya sakin Chrome 108 na gaba a ranar 29 ga Nuwamba.
Canje-canje masu mahimmanci a cikin Chrome 107:
- Ƙara goyon baya ga tsarin ECH (Encrypted Client Hello), wanda ke ci gaba da haɓaka ESNI (Tsarin Sunan uwar garke) kuma ana amfani dashi don ɓoye bayanai game da sigogin zaman TLS, kamar sunan yankin da aka nema. Babban bambanci tsakanin ECH da ESNI shine cewa maimakon yin rufaffen a matakin kowane filayen, ECH yana ɓoye duk sakon TLS ClientHello, wanda ke ba ku damar toshe leaks ta filayen da ESNI ba ta rufe, misali, PSK (Pre-Shared). Key) filin. ECH kuma yana amfani da rikodin HTTPSSVC DNS maimakon rikodin TXT don isar da mahimman bayanai na jama'a, kuma yana amfani da ingantacciyar ɓoyayyen ƙarshen-zuwa-ƙarshen dangane da hanyar Haɓaka Maɓalli na Jama'a (HPKE) don samu da ɓoye maɓalli. Don sarrafa ko an kunna ECH, an gabatar da saitin "chrome://flags#encrypted-client-hello".
- An kunna goyan bayan ƙaddamar da ƙaddamarwar bidiyo na hardware a cikin tsarin H.265 (HEVC).
- Mataki na biyar na rage bayanai a cikin mai amfani-Agent HTTP header da JavaScript sigogi navigator.userAgent, navigator.appVersion da navigator.platform an kunna, aiwatar da su don rage bayanan da za a iya amfani da su don gane da mai amfani. Chrome 107 ya rage dandamali da bayanan sarrafawa a cikin layin Mai amfani-Agent don masu amfani da tebur, kuma ya daskarar da abubuwan da ke cikin ma'aunin navigator.platform JavaScript. Ana iya ganin canjin ne kawai a cikin nau'ikan dandamali na Windows, wanda aka canza takamaiman sigar dandamali zuwa "Windows NT 10.0". A Linux, abun cikin dandamali a cikin Wakilin Mai amfani bai canza ba.
A baya can, an maye gurbin lambobin MINOR.BUILD.PATCH waɗanda suka haɗa sigar burauzar da 0.0.0. A nan gaba, an shirya barin kawai bayanai game da sunan mai bincike, babban nau'in mai binciken, dandamali da nau'in na'ura (wayar hannu, PC, kwamfutar hannu) a cikin taken. Don samun ƙarin bayanai, kamar ainihin sigar da tsawaita bayanan dandamali, dole ne ku yi amfani da API ɗin Abokin Ciniki na Wakilin Mai amfani. Don rukunin yanar gizon da ba su da isassun sabbin bayanai kuma har yanzu ba su shirya don canzawa zuwa Alamomin Abokin Ciniki na Wakilin Mai amfani ba, har zuwa Mayu 2023 suna da damar dawo da cikakken Wakilin Mai amfani.
- Sigar Android baya goyon bayan dandamalin Android 6.0; mai binciken yanzu yana buƙatar aƙalla Android 7.0.
- An canza ƙira don bin diddigin abubuwan zazzagewa. Maimakon layin ƙasa tare da bayanai game da ci gaban zazzagewar, an ƙara sabon nuna alama a cikin panel tare da sandar adireshin; lokacin da ka danna shi, ana nuna ci gaban zazzage fayiloli da tarihin tare da jerin fayilolin da aka riga aka sauke. Ba kamar rukunin ƙasa ba, ana nuna maballin koyaushe akan rukunin kuma yana ba ku damar shiga tarihin saukewa da sauri. A halin yanzu ana ba da sabuwar hanyar sadarwa ta tsohuwa ga wasu masu amfani kawai kuma za a ƙara shi ga kowa idan babu matsala.
- Ga masu amfani da tebur, yana yiwuwa a shigo da kalmomin shiga da aka adana a cikin fayil a tsarin CSV. A baya, kalmomin shiga daga fayil zuwa mai lilo za a iya canjawa wuri ta hanyar sabis na passwords.google.com, amma yanzu ana iya yin hakan ta hanyar Google Password Manager da aka gina a cikin mai binciken.
- Bayan mai amfani ya ƙirƙiri sabon bayanin martaba, ana nuna alamar gaggawa wanda zai sa ku kunna aiki tare kuma ku je saitunan, ta inda zaku iya canza sunan bayanin martaba kuma zaɓi jigon launi.
- Sigar dandali na Android yana ba da sabon hanyar sadarwa don zaɓar fayilolin mai jarida don loda hotuna da bidiyo (maimakon aiwatar da kansa, ana amfani da daidaitaccen ƙirar Android Media Picker).
- An bayar da sokewar izini ta atomatik don nuna sanarwar don shafukan da aka samu suna aika sanarwa da saƙon da ke tsoma baki tare da mai amfani. Haka kuma, don irin waɗannan rukunin yanar gizon, an dakatar da buƙatun neman izinin aika sanarwa.
- API ɗin Ɗaukar allo ya ƙara sabbin kaddarorin da ke da alaƙa da raba allo - selfBrowserSurface (yana ba ka damar ware shafin na yanzu lokacin kiran getDisplayMedia()), surfaceSwitching (ba ka damar ɓoye maɓallin don canza shafuka) da nuniSurface (ba ka damar iyakance rabawa zuwa tab, taga, ko allo).
- Ƙara kayan renderBlockingStatus zuwa API Performance don gano albarkatun da ke haifar da dakatawar shafi har sai sun gama lodawa.
- An ƙara sabbin APIs da yawa zuwa Yanayin Gwaji na Asalin (fasali na gwaji waɗanda ke buƙatar kunnawa daban). Gwajin Asalin yana nuna ikon yin aiki tare da ƙayyadaddun API daga aikace-aikacen da aka zazzage daga localhost ko 127.0.0.1, ko bayan yin rijista da karɓar wata alama ta musamman wacce ke aiki na ƙayyadadden lokaci don takamaiman rukunin yanar gizo.
- Bayanin API PendingBeacon, wanda ke ba ku damar sarrafa aika bayanan da baya buƙatar amsa (tambarin) zuwa uwar garken. Sabuwar API tana ba ku damar ƙaddamar da aika irin waɗannan bayanai zuwa mai bincike, ba tare da buƙatar kiran ayyukan aika a wani lokaci ba, misali, don tsara canja wurin telemetry bayan mai amfani ya rufe shafin.
- Manufofin Izini (Manufar Feature) HTTP header, da aka yi amfani da ita don ba da izini da kuma ba da damar ci-gaba fasali, yanzu tana goyan bayan ƙimar "cirewa", wanda za'a iya amfani da shi don musaki masu kula da abin da ya faru na "saukarwa" a shafi.
- Don yin tag ƙarin goyon baya ga sifa "rel", wanda ke ba ku damar amfani da ma'aunin "rel=noreferrer" don kewayawa ta hanyar yanar gizo don musaki canja wurin mai magana ko "rel=noopener" don musaki saitin kayan Window.opener kuma ya hana. samun dama ga mahallin da aka yi sauyi .
- CSS Grid ya ƙara goyan baya don haɗa ginshiƙan grid-samfurin-ginshiƙi da kaddarorin grid-samfurin-layukan don samar da sauyi mai sauƙi tsakanin jahohin grid daban-daban.
- An inganta kayan aiki don masu haɓaka gidan yanar gizo. An ƙara ikon daidaita maɓallan zafi. Ingantattun duban žwažwalwar ajiya na abubuwan aikace-aikacen C/C++ sun canza zuwa tsarin Gidan Yanar Gizo.
Baya ga sabbin abubuwa da gyare-gyaren kwaro, sabon sigar yana kawar da lahani 14. Yawancin raunin da aka gano sakamakon gwajin atomatik ta amfani da AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer da kayan aikin AFL. Ba a gano wata matsala mai mahimmanci da za ta ba mutum damar ƙetare duk matakan kariya na burauza ba da aiwatar da lamba akan tsarin a wajen yanayin sandbox. A wani bangare na shirin biyan tukuicin kudi don gano raunin da aka samu na sakin na yanzu, Google ya biya lambobin yabo 10 a cikin adadin dalar Amurka dubu 57 (kyauta daya na $20000, $17000 da $7000, lambobin yabo biyu na $3000, lambobin yabo uku na $2000 da daya. kyautar $ 1000). Har yanzu ba a tantance girman lada daya ba.
source: budenet.ru