Google sakin yanar gizo ... A lokaci guda barga sakin aikin kyauta , wanda shine tushen Chrome. Chrome browser amfani da tambarin Google, kasancewar tsarin aika sanarwa idan wani hatsari ya faru, da ikon zazzage na'urar Flash akan buƙatu, kayayyaki don kunna abun ciki na bidiyo mai kariya (DRM), tsarin shigar da sabuntawa ta atomatik da watsawa yayin bincike. . An shirya sakin Chrome 77 na gaba a ranar 10 ga Satumba.
:
- ta tsohuwa, yanayin kariya daga canja wurin Kukis na ɓangare na uku, wanda, in babu sifa ta SameSite a cikin taken Saita-Cookie, yana saita ƙimar “SameSite = Lax” ta tsohuwa, yana iyakance aika kukis don sakawa daga. rukunin yanar gizo na ɓangare na uku (amma har yanzu rukunin yanar gizon za su iya ƙetare ƙuntatawa ta hanyar saita fayyace lokacin saita ƙimar Kuki SameSite=Babu). Har ya zuwa yanzu, mai binciken ya aika da kuki ga duk wata bukata zuwa wani shafin da aka saita kuki, ko da an bude wani shafin da farko, kuma an yi buqatar a fakaice ta hanyar loda hoto ko ta hanyar iframe. A cikin yanayin 'Lax', ana toshe watsa kuki don buƙatun rukunin yanar gizo, kamar buƙatun hoto ko loda abun ciki na iframe, waɗanda galibi ana amfani da su don ƙaddamar da hare-haren CSRF da bin diddigin motsin mai amfani tsakanin shafuka.
- An dakatar da kunna abun cikin Flash ta tsohuwa. Har sai an fitar da Chrome 87, wanda ake tsammanin a watan Disamba 2020, ana iya dawo da tallafin Flash a cikin saitunan (Na ci gaba> Sirri da Tsaro> Saitunan Yanar Gizo), sannan kuma tabbataccen tabbataccen aiki na kunna abun cikin Flash ga kowane rukunin yanar gizo (tabbacin shine. tuna har sai an sake kunna mai binciken). Cikakken cire lambar don tallafawa Flash yana cikin aiki tare da shirin Adobe da aka sanar a baya don kawo ƙarshen tallafi ga fasahar Flash a cikin 2020;
- Ga kamfanoni, an ƙara ikon bincika fayiloli a cikin ma'ajiyar Google Drive zuwa mashigin adireshin;
- An fara Tallace-tallacen da ba ta dace ba a cikin Chrome wanda ke tsoma baki tare da fahimtar abun ciki kuma baya cika ka'idojin da Haɗin gwiwar Tallace-tallacen Ingantaccen Talla;
- An aiwatar da yanayin daidaitawa don canzawa zuwa sabon shafi, wanda aka share abubuwan da ke cikin yanzu kuma ana nuna farin bango ba nan da nan ba, amma bayan ɗan ɗan lokaci kaɗan. Don shafukan da ake lodawa da sauri, gogewa kawai yana haifar da kyalkyali kuma baya samar da nauyin sanar da mai amfani cewa sabon shafi yana gab da lodawa. A cikin sabon sakin, idan shafi yana buɗewa da sauri kuma an sami ɗan jinkiri, to sabon shafin yana nunawa a wurin, yana maye gurbin wanda ya gabata ba tare da matsala ba (misali, dacewa lokacin canzawa zuwa wasu shafuka na wannan rukunin yanar gizon waɗanda suke kama da ƙira. da tsarin launi). Idan ya ɗauki ɗan lokaci sananne ga mai amfani don nuna shafin, to, kamar yadda yake a da, za a riga an share allon;
- An ƙarfafa ma'auni don ƙayyade ayyukan mai amfani akan shafi. Chrome yana ba ku damar nuna sanarwar faɗowa da kunna abun ciki na bidiyo/audiyo mai ban haushi kawai bayan ayyukan mai amfani akan shafin. Tare da sabon sakin, latsa Tsagewa, shawagi akan hanyar haɗin gwiwa, da taɓa allon ba a ganin su azaman hulɗar kunna shafi (ana buƙatar dannawa, bugawa, ko gungurawa bayyane);
- tambayar kafofin watsa labarai “yana son-launi-tsarin”, wanda ke ba da damar shafuka don tantance ko mai binciken yana amfani da jigo mai duhu kuma yana kunna jigon duhu kai tsaye don kallon rukunin yanar gizon.
- Lokacin da kuka kunna jigon duhu a cikin gini don Linux, adireshin adireshin yanzu ana nuna shi cikin launi mai duhu;
- ikon tantance buɗe shafi a cikin yanayin incognito ta hanyar magudi tare da API FileSystem, wanda wasu wallafe-wallafen suka yi amfani da su a baya don ƙaddamar da biyan kuɗi idan an buɗe shafuka ba tare da tunawa da Kukis ba (don masu amfani ba su yi amfani da yanayin sirri ba. don ketare hanyar samar da damar gwaji kyauta). A baya can, lokacin aiki a yanayin incognito, mai binciken ya toshe damar shiga FileSystem API don hana bayanai daga sagging tsakanin zaman, wanda ya ba JavaScript damar bincika ikon adana bayanai ta hanyar FileSystem API kuma, idan akwai gazawa, don yin hukunci akan ayyukan yanayin incognito. Yanzu ba a katange damar zuwa FileSystem API ba, kuma an share abun ciki bayan ƙarshen zaman;
- sababbin kalubale a
Buƙatar Biyan API da Mai Gudanar da Biyan Kuɗi. Sabuwar hanyar canza hanyar biyan kuɗi () ta bayyana a cikin abin da ake biya na PaymentRequestEvent, kuma an ƙara sabon tsarin biyan kuɗi na taron zuwa abu na PaymentRequest, wanda ke ba da damar wurin tattara biyan kuɗi ko aikace-aikacen yanar gizo don ba da amsa ga mai amfani da ke canza hanyar biyan kuɗi. Sabuwar sakin kuma ta sauƙaƙa don biyan APIs don gwada aikace-aikacen ta amfani da takaddun sa hannu. Don yin watsi da kurakuran tabbatar da takaddun shaida yayin haɓakawa, an ƙara sabon zaɓin layin umarni "-kuskure-takaddar-certificate-errors" an ƙara; - A cikin adireshin adireshin da ke kusa da maɓallin don ƙarawa zuwa alamun shafi don aikace-aikacen yanar gizo masu gudana a cikin yanayin Desktop Progressive Web Apps (PWA), gajeriyar hanya don shigar da aikace-aikacen yanar gizo akan tsarin don aiki azaman shirin daban;
- Don na'urorin hannu, yana yiwuwa a sarrafa nunin ƙaramin panel tare da gayyata don ƙara aikace-aikacen zuwa allon gida. Don aikace-aikacen PWA (Progressive Web App), ƙaramin mashaya tsoho yana nunawa ta atomatik lokacin da kuka fara buɗe rukunin yanar gizon. Mai haɓakawa na iya yanzu ƙin nuna wannan rukunin kuma ya aiwatar da saurin shigarwa na kansa, wanda zai iya shigar da mai sarrafa taron
kafin shigar da kuma haɗa kira don hana Default();
- An ƙaru mitar sabuntawa don aikace-aikacen PWA (Progressive Web App) da aka shigar a cikin yanayin Android. Ana duba sabuntawar WebAPK sau ɗaya a rana, kuma ba sau ɗaya a kowane kwana uku ba kamar da. Idan irin wannan cak ɗin ya nuna canji a cikin aƙalla maɓalli ɗaya a cikin bayanan, mai binciken zai zazzage kuma ya shigar da sabon WebAPK;
- A cikin API ya kara da ikon karantawa da rubuta hotuna da tsari ta hanyar allo ta amfani da hanyoyin navigator.clipboard.read() da navigator.clipboard.write();
- Aiwatar da goyan bayan ƙungiyar masu kai HTTP (Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site da Sec-Fetch-User), yana ba ku damar aika ƙarin metadata game da yanayin buƙatar (buƙatun giciye, buƙata ta img tag, da sauransu). .) don karɓa ta matakan uwar garke don kare kariya daga wasu nau'ikan hare-hare (misali, da wuya a ƙayyade hanyar haɗi zuwa mai sarrafa don canja wurin kuɗi ta hanyar img tag, don haka za a iya toshe irin waɗannan buƙatun ba tare da wucewa zuwa aikace-aikacen ba. );
- Ƙara fasalin , wanda ke fara ƙaddamar da bayanan tsari ta hanyar shirye-shirye kamar yadda ake danna maɓallin ƙaddamarwa. Ana iya amfani da aikin lokacin haɓaka maɓallan ƙaddamar da fom ɗin ku, wanda form ɗin kira.submit() bai isa ba saboda gaskiyar cewa baya haifar da ingantaccen ma'amala na sigogi, haɓaka taron 'submit' da watsa bayanai. ɗaure zuwa maɓallin ƙaddamarwa;
- Ƙara aikin zuwa IndexedDB , wanda ke ba ku damar yin ma'amaloli masu alaƙa da IDBTransaction abu ba tare da jiran masu gudanar da taron ba a duk buƙatun da aka haɗa don kammalawa. Yin amfani da ƙaddamar () yana ba ku damar ƙara yawan abubuwan da aka rubuta da kuma karanta buƙatun zuwa ma'ajiyar da sarrafa zahirin kammala cinikin;
- Ƙara zaɓuɓɓuka zuwa ayyuka na Intl.DateTimeFormat kamar formatToParts() da warware Zaɓuɓɓuka() , wanda ke ba ka damar buƙatar takamaiman kwanan wata da salon nunin lokaci;
- An gyaggyara hanyar BigInt.prototype.toLocaleString() don tsara lambobi dangane da wurin gida, kuma hanyar Intl.NumberFormat.prototype.format() da tsarin tsarinToParts() an canza su don tallafawa ƙimar shigar da BigInt;
- API an yarda a cikin kowane nau'in Ma'aikatan Gidan Yanar Gizo, wanda za'a iya amfani dashi don zaɓar mafi kyawun sigogi lokacin ƙirƙirar MediaStream daga ma'aikaci;
- Hanyar da aka ƙara , wanda ya dawo kawai cika ko ƙi alkawura, ba tare da alkawuran da ke jiran aiki ba;
- An cire zaɓin "--disable-infobars", wanda za'a iya amfani dashi a baya don ɓoye faɗakarwar faɗakarwa a cikin ƙirar Chrome (An gabatar da dokar CommandLineFlagSecurityWarningsEnabled don ɓoye gargaɗin da suka shafi tsaro);
- Zuwa dubawa don aiki tare da blobs hanyoyin rubutu (), arrayBuffer () da rafi () don karanta takamaiman nau'ikan bayanai;
- Ƙara kayan CSS "fararen sarari: break-spaces" don ƙididdige cewa kowane jerin fararen sararin samaniya da ke haifar da ambaliya ya kamata a karya;
- An fara aikin tsaftace tutoci a cikin chrome://flags, misali, tuta don musaki sifa ta "ping", wanda ke ba masu rukunin yanar gizon damar bin diddigin danna mahaɗin daga shafukansu. Idan kun bi hanyar haɗi kuma akwai sifa "ping=URL" a cikin alamar "a href" a cikin mai bincike, yanzu zaku iya musaki aika ƙarin buƙatun POST zuwa URL da aka ƙayyade a cikin sifa tare da bayani game da canji. Ma'anar toshe ping ya ɓace tun wannan sifa a cikin ƙayyadaddun HTML5 kuma akwai hanyoyi masu yawa don yin aiki iri ɗaya (misali, wucewa ta hanyar hanyar wucewa ko shiga tsakani tare da masu sarrafa JavaScript);
- An cire tutar musaki , wanda shafuka daga runduna daban-daban ke kasancewa koyaushe a cikin ƙwaƙwalwar ajiyar matakai daban-daban, kowannensu yana amfani da akwatin yashi.
- Injin V8 ya ƙara haɓaka aikin dubawa da tantance tsarin JSON. Don shahararrun shafukan yanar gizo, JSON.parse kisa yana yin sauri har sau 2.7. An ƙara saurin jujjuya kirtani na unicode, misali, saurin kira zuwa String#localeCompare, String#normalize, da kuma wasu Intl APIs, sun kusan ninka sau biyu. Ayyukan ayyuka tare da daskararrun tsararru kuma an inganta su sosai yayin amfani da ayyuka kamar frozen.indexOf(v), daskararre.includes (v), fn (... daskararre), fn (...[... daskararre]) kuma fn.apply (wannan, [... daskararre]).
Baya ga sabbin abubuwa da gyare-gyaren kwaro, sabon sigar yana kawar da shi . An gano yawancin raunin da aka samu a sakamakon kayan aikin gwaji na atomatik , , , и . Ba a gano wasu matsaloli masu mahimmanci waɗanda za su ba mutum damar ƙetare duk matakan kariya na burauza da aiwatar da lamba akan tsarin a wajen yanayin sandbox. A matsayin wani ɓangare na shirin biyan tukuicin kuɗi don gano lahani ga sakin na yanzu, Google ya biya kyaututtuka 16 a cikin adadin dala 23500 (kyautar $10000 ɗaya, lambar yabo ta $6000, lambobin yabo biyu na $3000 da kyaututtuka uku na $500). Har yanzu ba a tantance girman lada guda 9 ba.
source: budenet.ru