Google ya bayyana sakin mai binciken gidan yanar gizo na Chrome 90. A lokaci guda, ana samun tabbataccen sakin aikin Chromium kyauta, wanda ke zama tushen Chrome. An bambanta mai binciken Chrome ta hanyar amfani da tambarin Google, kasancewar tsarin aika sanarwa idan akwai hadari, kayayyaki don kunna abun ciki na bidiyo mai kariya (DRM), tsarin shigar da sabuntawa ta atomatik, da watsa sigogin RLZ lokacin bincike. An shirya sakin Chrome 91 na gaba a ranar 25 ga Mayu.
Canje-canje masu mahimmanci a cikin Chrome 90:
- Ana kunna duk masu amfani don buɗe shafuka ta hanyar HTTPS ta tsohuwa lokacin buga sunayen runduna a mashin adireshi. Misali, idan ka shigar da mai masaukin misali.com, shafin https://example.com za a bude shi ta hanyar tsohuwa, kuma idan matsala ta taso lokacin budewa, za a mayar da shi zuwa http://example.com. Don sarrafa amfani da tsohowar "https://", ana ba da shawarar saitin "chrome://flags#omnibox-default-typed-navigations-to-https".
- Yanzu yana yiwuwa a sanya lakabi daban-daban zuwa windows don raba su da gani a cikin tebur ɗin tebur. Taimako don canza sunan taga zai sauƙaƙa tsarin aikin lokacin amfani da windows mai bincike daban don ayyuka daban-daban, alal misali, lokacin buɗe windows daban don ayyukan aiki, abubuwan sirri, nishaɗi, kayan da aka jinkirta, da sauransu. Ana canza sunan ta hanyar abin "Ƙara taken taga" a cikin menu na mahallin da ke bayyana lokacin da ka danna dama a kan wani wuri mara komai a mashigin shafin. Bayan canza sunan a cikin rukunin aikace-aikacen, maimakon sunan rukunin yanar gizon daga shafin mai aiki, ana nuna sunan da aka zaɓa, wanda zai iya zama da amfani yayin buɗe shafuka iri ɗaya a cikin windows daban-daban waɗanda ke da alaƙa da asusun daban. Ana kiyaye ɗaurin tsakanin zaman kuma bayan sake kunnawa za a dawo da windows tare da zaɓaɓɓun sunaye.
- Ƙara ikon ɓoye "Jerin Karatu" ba tare da canza saituna a cikin "chrome: // flags" ("chrome: // flags# karanta-baya"). Don ɓoyewa, yanzu zaku iya amfani da zaɓin "Nuna Lissafin Karatu" a ƙasan menu na mahallin da aka nuna lokacin da kuka danna dama akan mashigin alamun. Bari mu tunatar da ku cewa a cikin saki na ƙarshe, lokacin da wasu masu amfani suka danna alamar alama a cikin adireshin adireshin, ban da maɓallin "Ƙara alamar shafi", maɓallin na biyu "Ƙara zuwa lissafin karatu" ya bayyana, kuma a kusurwar dama na alamar shafi menu na "Lissafin Karatu" ya bayyana, wanda ke lissafin duk shafukan da aka ƙara a cikin jerin. Lokacin da ka buɗe shafi daga lissafin, ana yi masa alama kamar yadda aka karanta. Shafukan da ke cikin lissafin kuma ana iya yiwa alama alama da hannu azaman karantawa ko ba a karanta ba, ko cire su daga lissafin.
- Ƙara goyon baya don rarrabuwar hanyar sadarwa don karewa daga hanyoyin bin diddigin motsin mai amfani tsakanin shafuka dangane da adana abubuwan ganowa a wuraren da ba a yi niyya don adana bayanai na dindindin ba ("Supercookies"). Saboda ana adana albarkatun da aka adana a cikin sunan gama gari, ba tare da la'akari da asalin yankin ba, wani rukunin yanar gizon zai iya tantance cewa wani rukunin yanar gizon yana loda albarkatun ta hanyar duba ko wannan albarkatun yana cikin ma'ajin. Kariyar ta dogara ne akan yin amfani da sashin cibiyar sadarwa (Network Partitioning), ainihin abin da shine ƙarawa cikin caches masu raba ƙarin ɗaurin bayanai zuwa yankin da aka buɗe babban shafi, wanda ke iyakance ɗaukar hoto don rubutun bin diddigin motsi kawai. zuwa rukunin yanar gizon na yanzu (rubutun daga iframe ba zai iya bincika ko an sauke albarkatun daga wani rukunin yanar gizon ba). Farashin rarrabuwa shine raguwar ingancin caching, yana haifar da ɗan ƙara haɓaka lokacin ɗaukar shafi (mafi yawa da 1.32%, amma don 80% na rukunin yanar gizo ta 0.09-0.75%).
- An sake cika baƙaƙen jerin sunayen tashoshin yanar gizo waɗanda aika buƙatun HTTP, HTTPS da FTP don kare kai daga hare-haren zamewar NAT, wanda ke ba da damar, lokacin buɗe shafin yanar gizon da maharin ya shirya musamman a cikin mai bincike, don kafa hanyar sadarwa. haɗi daga uwar garken maharin zuwa kowane tashar UDP ko TCP akan tsarin mai amfani, duk da amfani da kewayon adireshin ciki (192.168.xx, 10.xxx). Ƙara 554 (ka'idar RTSP) da 10080 (an yi amfani da su a madadin Amanda da VMWare vCenter) zuwa jerin wuraren da aka haramta. A baya can, an toshe tashoshin jiragen ruwa 69, 137, 161, 554, 1719, 1720, 1723, 5060, 5061 da 6566.
- Ƙara goyon baya na farko don buɗe takaddun PDF tare da siffofin XFA a cikin mai bincike.
- Ga wasu masu amfani, an kunna sabon sashin saituna "Saitunan Chrome> Keɓantawa da tsaro> Akwatin sandbox na keɓanta", wanda ke ba ku damar sarrafa sigogi na FLoC API, da nufin ƙayyade nau'in abubuwan masu amfani ba tare da gano mutum ba kuma ba tare da la'akari da su ba. tarihin ziyartar takamaiman shafuka.
- Ana nuna ƙararrawar sanarwa tare da jerin ayyukan da aka yarda yanzu lokacin da mai amfani ya haɗa zuwa bayanin martaba wanda aka kunna gudanarwa ta tsakiya.
- Ya sanya neman izinin izinin keɓancewa ya zama ƙasa da tsangwama. Buƙatun da mai amfani zai iya ƙi amincewa yanzu an toshe shi ta atomatik tare da madaidaicin alamar da aka nuna a mashigin adireshi, wanda mai amfani zai iya zuwa wurin dubawa don sarrafa izini akan kowane rukunin yanar gizo.
- Taimako don haɓaka fasahar Intel CET (Intel Control-flow Enforcement Technology) an haɗa shi don kariyar kayan aiki daga fa'idodin da aka gina ta amfani da dabaru na shirye-shiryen da suka dace (ROP, Return-Oriented Programming).
- Aiki yana ci gaba da canza mai binciken don amfani da kalmomin da ya haɗa da su. An canza sunan fayil ɗin "master_preferences" zuwa "primary_preferences" don guje wa ɓata ra'ayi na masu amfani waɗanda suka fahimci kalmar "master" a matsayin alama game da tsohon bautar kakanninsu. Don ci gaba da dacewa, goyan bayan "master_preferences" zai kasance a cikin mai bincike na ɗan lokaci. A baya can, mai bincike ya riga ya kawar da amfani da kalmomin "farar fata", "blacklist" da "yan ƙasa".
- A cikin nau'in Android, lokacin da aka kunna yanayin ceton zirga-zirgar "Lite", ana rage bitrate lokacin zazzage bidiyo lokacin da aka haɗa ta hanyar cibiyoyin sadarwar masu amfani da wayar hannu, wanda zai rage farashin masu amfani waɗanda ke da tasirin zirga-zirga. Yanayin “Lite” kuma yana ba da matsi na hotunan da aka nema daga albarkatun jama'a (ba buƙatar tantancewa ba) ta HTTPS.
- Ƙara mai rikodin tsarin bidiyo na AV1, an inganta shi musamman don amfani a taron taron bidiyo bisa ka'idar WebRTC. Yin amfani da AV1 a cikin taron tattaunawa na bidiyo yana ba da damar haɓaka haɓakar matsawa da kuma samar da damar watsa shirye-shirye akan tashoshi tare da bandwidth na 30 kbit / sec.
- A cikin JavaScript, abubuwan Array, String, da TypedArrays suna aiwatar da hanyar a (), wanda ke ba ku damar amfani da firikwensin dangi (an ayyana matsayin dangi azaman jigon tsararru), gami da ƙayyadaddun ƙima mara kyau dangane da ƙarshen (misali. , "arr.at(-1)" zai dawo da kashi na ƙarshe na tsararru).
- JavaScript ya kara kayan ".indices" don maganganun yau da kullum, wanda ya ƙunshi tsararru tare da matsayi na farawa da ƙare na ƙungiyoyin matches. Ana cika kadarorin ne kawai lokacin aiwatar da magana ta yau da kullun tare da tutar "/ d". const re = /(a)(b)/d; const m = re.exec ('ab'); console.log (m.indices[0]); // 0 - duk kungiyoyin wasa // → [0, 2] console.log (m.indices[1]); // 1 shine rukunin farko na matches // → [0, 1] console.log (m.indices[2]); // 2 - rukuni na biyu na matches // → [1, 2]
- An inganta aikin kaddarorin "super" (misali, super.x) wanda aka kunna cache na layi don su. Ayyukan amfani da "super" yanzu yana kusa da aikin samun dama ga kaddarorin yau da kullun.
- Kira ayyukan WebAssembly daga JavaScript an ƙara haɓaka sosai saboda amfani da tura layi. Wannan haɓakawa ya kasance na gwaji a yanzu kuma yana buƙatar gudana tare da tutar "-turbo-inline-js-wasm-calls".
- An ƙara WebXR Depth Sensing API, wanda ke ba ku damar tantance tazara tsakanin abubuwa a cikin mahallin mai amfani da na'urar mai amfani, misali, don ƙirƙirar ƙarin haƙiƙanin haɓaka aikace-aikacen gaskiya. Bari mu tunatar da ku cewa API ɗin WebXR yana ba ku damar haɗa aiki tare da nau'ikan na'urori na gaskiya daban-daban, daga kwalkwali na 3D na tsaye zuwa mafita dangane da na'urorin hannu.
- An daidaita fasalin Ƙimar Haske na WebXR AR, yana ba da damar zaman WebXR AR don ƙayyade sigogin hasken yanayi don ba samfura mafi kyawun bayyanar halitta da ingantaccen haɗin kai tare da yanayin mai amfani.
- Yanayin gwaji na asali (fasalolin gwaji waɗanda ke buƙatar kunnawa daban) suna ƙara sabbin APIs da yawa waɗanda a halin yanzu ke iyakance ga dandamalin Android. Gwajin Asalin yana nuna ikon yin aiki tare da ƙayyadaddun API daga aikace-aikacen da aka zazzage daga localhost ko 127.0.0.1, ko bayan yin rijista da karɓar wata alama ta musamman wacce ke aiki na ƙayyadadden lokaci don takamaiman rukunin yanar gizo.
- Hanyar getCurrentBrowsingContextMedia(), wanda ke ba da damar ɗaukar rafin bidiyo na MediaStream yana nuna abubuwan da ke cikin shafin na yanzu. Ba kamar irin wannan hanyar getDisplayMedia() ba, lokacin da ake kiran getCurrentBrowsingContextMedia(), ana gabatar da tattaunawa mai sauƙi ga mai amfani don tabbatarwa ko toshe ayyukan canja wurin bidiyo tare da abun cikin shafin.
- API ɗin rafukan da ba za a iya sakawa ba, wanda ke ba ka damar sarrafa albarkatun kafofin watsa labarai da ake watsawa ta MediaStreamTrack API, kamar bayanan kyamara da makirufo, sakamakon kama allo, ko matsakaicin bayanan yanke hukunci. Ana amfani da musaya na WebCodec don gabatar da ƙananan firam ɗin kuma ana samar da rafi mai kama da abin da WebRTC Insertable Streams API ke haifarwa bisa RTCpeerConnections. A gefen aiki, sabon API yana ba da damar aiki kamar amfani da dabarun koyon injin don ganowa ko bayyana abubuwa a cikin ainihin lokaci, ko ƙara tasiri kamar yanke bayanan baya kafin ɓoyewa ko bayan ƙaddamar da codec.
- Ikon tattara albarkatu cikin fakiti (Web Bundle) don tsara ingantaccen lodi na babban adadin fayiloli masu rakiyar (salon CSS, JavaScript, hotuna, iframes). Daga cikin gazawar da ke cikin goyon bayan fakitoci don fayilolin JavaScript (packwebpack), wanda Rukunin Yanar Gizo ke ƙoƙarin kawar da su: kunshin kanta, amma ba sassan sassanta ba, na iya ƙarewa a cikin cache HTTP; tattarawa da aiwatarwa na iya farawa ne kawai bayan an gama saukar da kunshin gaba ɗaya; Ƙarin albarkatun kamar CSS da hotuna dole ne a sanya su a cikin nau'in kirtani na JavaScript, wanda ke ƙara girma kuma yana buƙatar wani mataki na tantancewa.
- Taimako don keɓanta kulawa a cikin WebAssembly.
- Ƙaddamar da Shawarar Shadow DOM API don ƙirƙirar sabbin rassan tushe a cikin Shadow DOM, misali don raba salon ɓangarori na ɓangare na uku da aka shigo da shi da reshe na DOM mai alaƙa daga babban takaddar. API ɗin sanarwar da aka ƙaddamar yana ba ku damar amfani da HTML kawai don cire rassan DOM ba tare da buƙatar rubuta lambar JavaScript ba.
- Matsakaicin-rabobin CSS dukiya, wanda ke ba ka damar ɗaure ra'ayi kai tsaye zuwa kowane nau'in (don ƙididdige girman da ya ɓace ta atomatik lokacin da aka ƙayyade tsayi ko faɗi kawai), yana aiwatar da ikon daidaita dabi'u yayin raye-raye (daidaitaccen canji daga ɗaya). yanayin rabo zuwa wani).
- An ƙara ikon yin nuni da yanayin abubuwan HTML na al'ada a cikin CSS ta hanyar ajin-jita-jita ":state()". Ana aiwatar da aikin ta hanyar kwatanci tare da ikon daidaitattun abubuwan HTML don canza yanayin su dangane da hulɗar mai amfani.
- “Bayyana” kadarar CSS yanzu tana goyan bayan ƙimar 'auto', wanda aka saita ta tsohuwa don Kuma , kuma akan dandamalin Android bugu da žari don , , , Kuma .
- An ƙara goyan bayan ƙimar "clip" zuwa kayan CSS na "cirewa", lokacin da aka saita, abun ciki wanda ya wuce toshe ana yanke shi zuwa iyakar izinin toshewa ba tare da yuwuwar gungurawa ba. Ƙimar da ke ƙayyade iyakar abin da ke ciki zai iya wuce ainihin iyakar akwatin kafin a fara yankewa an saita shi ta sabon kayan CSS "overflow-clip-margin". Idan aka kwatanta da "cirewa: ɓoye", ta amfani da "overflow: clip" yana ba da damar yin aiki mafi kyau.
- An maye gurbin Feature-Policy HTTP header an maye gurbinsa da sabon Shugaban Manufofin Izini don sarrafa wakilai na izini da ba da damar abubuwan ci-gaba, wanda ya haɗa da goyan bayan ƙimar filin da aka tsara (misali, yanzu zaku iya saka "Izini-Manufa: geolocation). == ()" maimakon "Feature- Policy: geolocation 'none'").
- Ƙarfafa kariya daga yin amfani da Protocol Buffers don hare-haren da aka haifar da hasashe na aiwatar da umarni a cikin masu sarrafawa. Ana aiwatar da kariyar ta ƙara nau'in "application/x-protobuffer" MIME zuwa jerin nau'ikan MIME waɗanda ba a taɓa taɓa su ba, waɗanda ake sarrafa su ta hanyar Tsarin Katange-Asalin-Karanta-Karanta. A baya can, nau'in MIME "application/x-protobuf" an riga an haɗa shi cikin jerin irin wannan, amma "application/x-protobuffer" an bar shi.
- API ɗin Samun Tsarin Fayil yana aiwatar da ikon canza matsayi na yanzu a cikin fayil sama da ƙarshensa, yana cike gibin da aka samu tare da sifili yayin rubutu na gaba ta hanyar FileSystemWritableFileStream.write() kira. Wannan fasalin yana ba ku damar ƙirƙirar fayiloli marasa fa'ida tare da sarari fanko kuma yana sauƙaƙe tsarin rubutu zuwa rafukan fayil tare da isowar tubalan bayanai (misali, ana aiwatar da wannan a cikin BitTorrent).
- Ƙara StaticRange magini tare da aiwatar da nau'ikan Range masu nauyi waɗanda basa buƙatar ɗaukaka duk abubuwan da ke da alaƙa duk lokacin da bishiyar DOM ta canza.
- Aiwatar da ikon tantance nisa da sigogi masu tsayi don abubuwa kayyade a cikin kashi . Wannan fasalin yana ba ku damar ƙididdige yanayin yanayin abubuwan abubuwa , ta hanyar kwatanta da yadda ake yi don , Kuma .
- An cire tallafin da ba daidai ba na Tashoshin Bayanan RTP daga WebRTC, kuma ana ba da shawarar yin amfani da tashoshi na tushen bayanai na SCTP maimakon.
- Kaddarorin navigator.plugins da navigator.mimeTypes yanzu koyaushe suna dawo da ƙima mara kyau (bayan tallafin Flash ya ƙare, ba a buƙatar waɗannan kaddarorin).
- An yi babban ɓangare na ƙananan haɓakawa ga kayan aiki don masu haɓaka gidan yanar gizo kuma an ƙara sabon kayan aikin gyara CSS, flexbox.
Baya ga sabbin abubuwa da gyare-gyaren kwaro, sabon sigar yana kawar da lahani 37. Yawancin raunin da aka gano sakamakon gwajin atomatik ta amfani da AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer da kayan aikin AFL. Ba a gano wata matsala mai mahimmanci da za ta ba mutum damar ƙetare duk matakan kariya na burauza ba da aiwatar da lamba akan tsarin a wajen yanayin sandbox. A matsayin wani ɓangare na shirin bayar da ladan kuɗi don gano lahani ga sakin na yanzu, Google ya biya lambobin yabo 19 da suka kai $54000 (kyautar $20000 guda ɗaya, lambar yabo ta $10000, lambobin yabo $5000 guda biyu, lambobin yabo $3000, lambar yabo $2000 ɗaya, lambar yabo $1000 $500 guda ɗaya. )). Har yanzu ba a tantance girman lada guda 6 ba.
Na dabam, za a iya lura cewa jiya, bayan samuwar gyara gyara 89.0.4389.128, amma kafin a saki Chrome 90, wani amfani da aka buga, wanda ya yi amfani da wani sabon 0-rana rauni da cewa ba a gyarawa a Chrome 89.0.4389.128. . Har yanzu ba a bayyana ko an gyara wannan matsalar a cikin Chrome 90. Kamar yadda yake a farkon lamarin, cin gajiyar yana rufe lahani ɗaya kawai kuma baya ƙunshe da lambar don keɓance keɓantawar akwatin sandbox (lokacin da Chrome ke gudana tare da tutar "--no-sandbox". , amfani yana faruwa lokacin buɗe shafin yanar gizon akan dandamali na Windows yana ba ku damar gudanar da Notepad). Rashin lahani da ke tattare da sabon amfani yana shafar fasahar WebAssembly.
source: budenet.ru