Google ya wallafa sakin mai binciken gidan yanar gizo na Chrome 119. A lokaci guda, ana samun tabbataccen sakin aikin Chromium kyauta, wanda ke zama tushen Chrome. Mai bincike na Chrome ya bambanta da Chromium wajen amfani da tambarin Google, kasancewar tsarin aika sanarwa idan ya faru, tsarin wasa don kunna abun ciki na bidiyo mai kariya (DRM), tsarin shigar da sabuntawa ta atomatik, yana ba da damar keɓe Sandbox ta dindindin. , ba da maɓallan Google API da watsa RLZ- lokacin bincika sigogi. Ga waɗanda ke buƙatar ƙarin lokaci don sabuntawa, reshen Ƙarfafa Stable yana da tallafi daban, sannan makonni 8 ya biyo baya. An shirya sakin Chrome 120 na gaba don 5 ga Disamba.
Canje-canje masu mahimmanci a cikin Chrome 119:
- An taqaitaccen zagayowar tsarawar, wanda lokacin da ke tsakanin ƙirƙirar sabon reshe da farkon gwajin beta ya ragu - yanzu an kafa sigar beta kwana biyu bayan ƙirƙirar reshe, kuma ba bayan kwanaki 8 ba. Tabbatar da sigar beta, kamar da, ana aiwatar da shi a cikin makonni 4. Don haka, sake zagayowar shirye-shiryen don sabbin sakewa ya zama guntu da mako guda.
- An ba da ikon adana ƙungiyoyin shafuka. Yanzu mai amfani zai iya ajiye ƙungiyar kuma ya rufe shafukan da aka haɗa a ciki don kar su ɗauki kayan aiki. Daga baya, lokacin da buƙatar ta taso, ana iya dawo da shafuka daga rukunin da aka ajiye sannan kuma a buɗe su akan wasu na'urorin da ke shiga aikin aiki tare. An kunna fasalin ga wasu masu amfani; don kunna shi da ƙarfi, an samar da saitin "chrome://flags/#tab-groups-save".
- Mai dubawa ya canza kalmomin ayyuka da saitunan da suka shafi shafewa da asarar bayanai. Maimakon kalmar "share", yanzu ana amfani da kalmar "share" a irin waɗannan ayyuka, tun da kalmar "clearing" ba a gane ta kowane mai amfani da ita a matsayin alamar asarar bayanai da ba za a iya dawo da ita ba.
- Cikawar URL ta atomatik tana la'akari da duk wata kalma da aka yi amfani da ita a baya don neman shafi, kuma ba kawai kalmomin da suka dace da farkon adireshin ba. Misali, cika adireshin atomatik na "https://www.google.com/travel/flights" ba zai yi aiki ba kawai lokacin da ka shigar da kalmar "google" ba, har ma lokacin da ka shigar da "jirgi".
- An aiwatar da gyaran gyare-gyare ta atomatik lokacin shigar da adireshin gidan yanar gizon kuma an nuna alamun da suka dace, wanda aka yi la'akari da wuraren da mai amfani na yanzu ya buɗe a baya. Misali, buga "youtube" zai sa ka bude YouTube.com.
- Yana yiwuwa a bincika a cikin sassan alamar shafi ta hanyar adireshin adireshin. Misali, zaku iya ƙara sunan sashin alamomi yayin rubutawa, kuma Chrome zai ba da shawarar hanyoyin haɗin kai daga wannan sashin waɗanda suka dace da kalmar da aka shigar. Misali, buga "tafiya 2023 Sabuwa" zai ba da shawarar hanyoyin haɗin kai daga ɓangaren alamun shafi na 2023 masu alaƙa da New York.
- An aiwatar da nunin shawarwari don shahararrun rukunin yanar gizo, koda mai amfani bai ziyarce su ba a baya ko yayi kuskure lokacin shigar da URL. Misali, lokacin da, bin shawarar wani don buɗe Google Earth, mai amfani ya fara rubuta “googleear” ba tare da sanin ainihin adireshin ba, mai binciken zai ba da damar zuwa earth.google.com.
- Chrome don tebur ya inganta ingantaccen karanta bayanai a cikin adireshin adireshin kuma ya sa keɓancewa ya zama mai karɓa - yanzu ana nuna sakamako nan da nan bayan ka fara bugawa a mashigin adireshi.
- Dangane da canji zuwa ƙayyadaddun API ɗin Fetch, ana cire maɓallin HTTP na izini lokacin da ake turawa zuwa wani yanki ( asalin giciye).
- A cikin sanarwar sanarwa da saitunan wuri, an ƙara wani zaɓi don ba da damar sabis na kashewa ta atomatik don buƙatun tabbatar da iko (Sabis na Shawarwari). Akwai hanyoyi masu zuwa don zaɓar daga:
- Koyaushe nuna buƙatun izini don sanarwa da shiga wurin;
- yin watsi da buƙatun spam ta atomatik don izini ta amfani da tsarin Sabis na Shawarwari;
- ko da yaushe yin watsi da duk buƙatun don nuna sanarwar;
- Koyaushe toshe duk buƙatun don sanarwa da izinin wuri.
- A cikin ginin dandali na Android, lokacin da aka kunna daidaitaccen kariyar burauza (Safe Browsing> Daidaitaccen kariyar), ana aiwatar da binciken tsaro na ainihin lokaci na buɗaɗɗen URLs, dangane da canja wurin hashes daga URL ɗin da mai amfani ya buɗe zuwa sabar Google. . Don guje wa daidaita adireshin IP na mai amfani da hash, ana watsa bayanai ta hanyar wakili na tsaka-tsaki. A baya can, an yi tabbaci ta hanyar zazzage kwafin gida na jerin URLs marasa aminci zuwa tsarin mai amfani. Sabon tsarin yana ba ku damar toshe URLs masu ƙeta da sauri. Don tsarin tebur, an kunna irin wannan yanayin a cikin sakin karshe.
- Tserewa daga haruffa marasa haruffa a cikin sunan mai masauki lokacin kiran aikin URL an kawo shi cikin layi tare da sabunta ƙayyadaddun bayanai. Misali, kiran aikin 'URL("http://exa(mple.com;")' a baya an dawo da 'http://exa%28mple.com/', amma yanzu zai haifar da kuskuren " URL mara inganci".
- Duk Kukis ɗin da aka adana a baya suna da iyakancewar rayuwa da aka yi amfani da su kamar abin da aka yi amfani da shi tun fitowar Chrome 104 don sababbin kukis da aka sabunta. Kukis ɗin da suka wanzu za a rage rayuwarsu zuwa kwanaki 400 dangane da sakin Chrome 119.
- CSS yana gabatar da sabbin azuzuwan ƙididdiga ": mai amfani- inganci" da ": mai amfani-invalid" waɗanda ke wakiltar nau'ikan nau'ikan nau'ikan abubuwan da ƙimarsu ta wuce ko ta gaza ingantawa. Ba kamar ": inganci" da ": mara inganci", sabbin azuzuwan ƙididdiga suna kunna wuta ne kawai bayan hulɗar mai amfani tare da sigar sigar.
- Lokacin saita launuka a cikin CSS, ana ba ku damar ayyana ƙimar da aka ƙididdige su dangane da sauran sigogin launi. Misali, tantance "oklab (daga magenta calc(l * 0.8) ab)" zai samar da launi mai haske 80% fiye da magenta.
- Kayan CSS na shirin-hanyar, wanda ke ba ka damar iyakance ganuwa na wani yanki zuwa takamaiman yanki, yanzu yana goyan bayan ƙimar. don ƙayyade wurin da aka saba don shuka. Hakanan yana yiwuwa a yi amfani da ayyukan xywh() da rect() don sauƙaƙa ma'anar wurare masu murabba'i ko zagaye.
- An kashe goyan bayan API ɗin WebSQL, kuma ana ba da shawarar yin amfani da Ma'ajiyar Yanar Gizo da APIs Databaseed maimakon. Injin WebSQL ya dogara ne akan lambar ɗakin karatu na SQLite. Ba a tallafawa API ɗin WebSQL a cikin wasu masu bincike, an ɗaure shi da API ɗin ɗakin karatu na waje, kuma yana ƙara haɗarin matsalolin tsaro (WebSQL na iya amfani da maharan don amfani da rauni a cikin SQLite). Don dawo da goyan bayan WebSQL ga masu amfani da sana'a, an kiyaye manufofin shiga yanar gizo kuma za a cire su a cikin Chrome 123.
- An cire HTML Sanitizer API na ɗan lokaci, wanda ke ba ka damar yanke abubuwa daga abubuwan da ke shafar nuni da aiwatarwa lokacin fitarwa ta hanyar saitinHTML(). An ƙera API ɗin don cire alamun HTML waɗanda za a iya amfani da su don aiwatar da harin XSS. Dalilin cirewa shine rashin cika ƙayyadaddun ƙayyadaddun bayanai, wanda ya canza sosai tun bayan ƙara Sanitizer zuwa Chrome. Da zarar an shirya ƙayyadaddun bayanai, za a dawo da API ɗin.
- An cire sifa wacce ba daidai ba ta inuwaRoot, wanda ke ba da damar abubuwan asali don samun dama ga tushensu daban a cikin Shadow DOM, ba tare da la'akari da jiha ba. Maimakon inuwaRoot, an gabatar da sifa ta inuwaRootMode a cikin Chrome 111, wanda aka haɗa cikin ma'aunin gidan yanar gizo.
- Ingantattun aiwatar da abubuwan HTML" ", wanda yayi kama da "iframe" kuma yana ba ku damar shigar da abun ciki na ɓangare na uku akan shafi. Bambance-bambancen sun sauko don iyakance hulɗar abubuwan da aka haɗa tare da abun ciki na shafi a matakin DOM da sifa. Misali, shafin labarai.example wanda ke da shingen talla da aka saka a ciki ta amfani da shingen shinge, wanda aka ɗora daga takalma.misali, ba zai iya samun damar yin amfani da takalma.misali bayanai ba, kuma bi da bi, lambar daga takalma.misali ba zai iya samun damar bayanan da ke tattare da labarai ba. misali. Sabuwar sigar tana ƙara goyan bayan macro don girman rukunin talla wanda ya bayyana a cikin API ɗin Masu Sauraro Mai Karewa, misali, "https://ad.com?width={/%AD_WIDTH%}&height={/%AD_HEIGHT%}" .
- Ƙara ma'auni na dubaTypeSurfaces zuwa hanyar getDisplayMedia() wanda za'a iya amfani dashi don hana raba dukkan allon.
- An ƙara ma'aunin gwaji (gwajin asali) cikakken allo zuwa hanyar taga.open(), yana ba ku damar buɗe taga nan da nan a yanayin cikakken allo.
- An ƙara tutar "bitrateMode" zuwa API ɗin AudioEncoderConfig don zaɓar tsakanin bitrate na akai-akai da mai canzawa.
- TLS ya haɗa da aiwatar da maɓalli na tsarin rufewa (KEM, Key Encapsulation Mechanism), ta amfani da X25519Kyber768 hybrid algorithm, mai juriya ga zaɓi akan kwamfutoci masu yawa. Don ƙirƙirar maɓallan zaman da aka yi amfani da su don ɓoye bayanai a cikin haɗin TLS, haɗuwa da tsarin musayar maɓallin kewayawa na X25519 elliptic, yanzu ana amfani da shi a cikin TLS, tare da Kyber-768 algorithm, wanda ke amfani da hanyoyin cryptography dangane da warware matsalolin ka'idar lattice, yanzu ana iya amfani da su. , lokacin maganin wanda ba ya bambanta akan kwamfutoci na al'ada da ƙididdiga.
- Taimako don tsawo na WasmGC yana kunna ta tsohuwa, wanda ke sauƙaƙe jigilar shirye-shiryen da aka rubuta a cikin harsunan shirye-shirye waɗanda ke amfani da mai tara shara (Kotlin, PHP, Java, da sauransu) zuwa Gidan Yanar Gizo. WasmGC yana ƙara sabbin nau'ikan sifofi da tsararraki waɗanda zasu iya amfani da ƙayyadaddun ƙwaƙwalwar ajiya mara layi.
- An inganta kayan aiki don masu haɓaka gidan yanar gizo. An ƙara ikon gyara dokokin CSS "@property" da faɗakarwar faɗakarwa idan an ayyana su ba daidai ba. An sabunta jerin na'urorin da aka kwaikwayi (misali, iPhone 14 da Pixel 7 an ƙara). Ana aiwatar da kammala filayen masu zaman kansu ta atomatik a cikin na'ura mai kwakwalwa ta yanar gizo. Samar da tsara bayanan JSON da aka sanya a cikin tubalan
Baya ga sabbin abubuwa da gyare-gyaren kwaro, sabon sigar tana kawar da lahani 15. Yawancin raunin da aka gano sakamakon gwajin atomatik ta amfani da AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer da kayan aikin AFL. Ba a gano wata matsala mai mahimmanci da za ta ba mutum damar ƙetare duk matakan kariya na burauza ba da aiwatar da lamba akan tsarin a wajen yanayin sandbox. A wani bangare na shirin bayar da tukuicin kudi don gano lallausan da aka saki a halin yanzu, Google ya biya lambobin yabo 13 a cikin adadin dalar Amurka dubu 40.5 (kyauta daya na $16000, $11000, $2000 da $500, lambobin yabo uku na $3000 da kyaututtuka biyu na $1000). ). Har yanzu ba a tantance girman lada guda 4 ba.
source: budenet.ru