Google ya bayyana sakin mai binciken gidan yanar gizo na Chrome 92. A lokaci guda kuma, ana samun tabbataccen sakin aikin Chromium kyauta, wanda ke zama tushen Chrome. An bambanta mai binciken Chrome ta hanyar amfani da tambarin Google, kasancewar tsarin aika sanarwa idan akwai hadari, kayayyaki don kunna abun ciki na bidiyo mai kariya (DRM), tsarin shigar da sabuntawa ta atomatik, da watsa sigogin RLZ lokacin bincike. An shirya sakin Chrome 93 na gaba don 31 ga Agusta.
Canje-canje masu mahimmanci a cikin Chrome 92:
- An ƙara kayan aiki zuwa saitunan don sarrafa haɗa abubuwan haɗin akwatin Sandbox na Sirri. An bai wa mai amfani damar don musaki fasahar FLoC (Federated Learning of Cohorts), wanda Google ke haɓakawa don maye gurbin Kukis masu bin diddigin motsi tare da "ƙungiyoyin ƙungiyoyi" waɗanda ke ba da damar gano masu amfani da irin wannan abubuwan ba tare da gano mutane ba. Ana ƙididdige ƙungiyoyin ƙungiyoyi a gefen burauza ta hanyar amfani da algorithms na koyon injin don bincika bayanan tarihi da abun ciki da aka buɗe a cikin mai binciken.
- Ga masu amfani da tebur, ana kunna cache Back-gaba ta tsohuwa, tana ba da kewayawa kai tsaye lokacin amfani da maɓallan Baya da Gaba ko lokacin kewayawa ta shafukan da aka gani a baya na rukunin yanar gizon na yanzu. A baya can, cache na tsalle yana samuwa ne kawai a cikin ginawa don dandalin Android.
- Ƙara keɓewar shafuka da ƙari a cikin matakai daban-daban. Idan a baya tsarin keɓewar Yanar Gizo ya tabbatar da keɓantawar shafuka daga juna a cikin matakai daban-daban, sannan kuma ya raba duk add-on zuwa wani tsari daban, to sabon sakin yana aiwatar da rarrabuwa na add-ons daga juna ta hanyar motsa kowane ƙara- a cikin wani tsari na daban, wanda ya ba da damar ƙirƙirar wani shinge don kariya daga ƙara-kan qeta.
- Mahimman ƙãra yawan aiki da inganci na gano phishing. Gudun gano phishing bisa nazarin hoton gida ya karu har sau 50 a cikin rabin lokuta, kuma a cikin kashi 99% na lokuta ya juya ya zama aƙalla sau 2.5 cikin sauri. A matsakaita, lokacin da za a rarraba phishing ta hoto ya ragu daga daƙiƙa 1.8 zuwa 100 ms. Gabaɗaya, nauyin CPU ɗin da aka ƙirƙira ta duk hanyoyin samarwa ya ragu da 1.2%.
- An saka tashar jiragen ruwa 989 (ftps-data) da 990 (ftps) cikin jerin wuraren da aka haramta. A baya can, an toshe tashar jiragen ruwa 69, 137, 161, 554, 1719, 1720, 1723, 5060, 5061, 6566 da 10080. Don mashigai da ke cikin jerin baƙaƙe, ana toshe HTTP, HTTPS da buƙatun FAT don kare buƙatun NTP. harin slipstreaming, wanda ke ba da izini lokacin buɗe shafin yanar gizon da maharin ya shirya musamman a cikin mai bincike, kafa hanyar sadarwa daga uwar garken maharin zuwa kowane tashar UDP ko TCP akan tsarin mai amfani, duk da amfani da kewayon adireshin ciki (192.168.xx). , 10.xxx).
- An gabatar da buƙatu don amfani da tabbatarwa mai haɓaka abubuwa biyu lokacin buga sabon ƙari ko sabuntawar sigar zuwa Shagon Yanar Gizon Chrome.
- Yanzu yana yiwuwa a kashe abubuwan da aka riga aka shigar a cikin mai binciken idan an cire su daga Shagon Yanar Gizon Chrome saboda keta dokokin.
- Lokacin aika tambayoyin DNS, dangane da amfani da sabobin DNS na yau da kullun, ban da bayanan “A” da “AAAA” don tantance adiresoshin IP, ana kuma buƙatar rikodin “HTTPS” DNS ɗin yanzu, ta inda ake wuce sigogi don sauri. kafa hanyoyin haɗin HTTPS, kamar saitunan ladabi, TLS ClientHello maɓallan ɓoyewa, da jerin sunayen ƙananan yanki.
- An hana kiran jawabai na JavaScript window.alert, window.confirm da taga.prompt daga bulogin iframe da aka ɗora daga yankunan ban da yankin shafin na yanzu. Canjin zai taimaka kare masu amfani daga cin zarafi masu alaƙa da yunƙurin gabatar da sanarwar ɓangare na uku azaman buƙata daga babban rukunin yanar gizon.
- Sabon shafin shafin yana ba da jerin shahararrun takaddun da aka adana a cikin Google Drive.
- Yana yiwuwa a canza suna da gunki don aikace-aikacen PWA (Progressive Web Apps).
- Don ƙaramin bazuwar adadin fom ɗin gidan yanar gizo waɗanda ke buƙatar shigar da adireshi ko lambar katin kiredit, shawarwarin cikawa za a kashe su azaman gwaji.
- A cikin sigar tebur, zaɓin neman hoto (abun "Nemi Hoto" a cikin mahallin mahallin) an canza shi don amfani da sabis na Lens na Google maimakon injin bincike na Google da aka saba. Lokacin da ka danna maɓallin da ya dace a cikin menu na mahallin, za a tura mai amfani zuwa wani aikace-aikacen yanar gizo na daban.
- A cikin yanayin incognito, hanyoyin haɗin yanar gizo zuwa tarihin binciken suna ɓoye (hanyoyin ba su da amfani, saboda sun kai ga buɗe stub tare da bayanin cewa ba a tattara tarihin ba).
- An ƙara sabbin umarni waɗanda aka karkata lokacin shigar da adireshin adireshin. Misali, don nuna maɓalli don saurin zuwa shafin don bincika amincin kalmomin shiga da ƙari, kawai rubuta “safety check”, kuma don zuwa saitunan tsaro da daidaitawa, kawai buga “manage security settings” da “ sarrafa daidaitawa".
- Canje-canje na musamman a cikin nau'in Android na Chrome:
- Ƙungiyar tana da sabon maɓallin “Magic Toolbar” wanda za a iya daidaita shi wanda ke nuna gajerun hanyoyi daban-daban waɗanda aka zaɓa bisa la’akari da ayyukan mai amfani na yanzu kuma ya haɗa da hanyoyin haɗin yanar gizo waɗanda wataƙila ana buƙata a yanzu.
- An sabunta aiwatar da tsarin koyan injunan na'ura don gano yunƙurin ɓarna. Lokacin da aka gano yunƙurin satar bayanan sirri, ban da nuna shafin faɗakarwa, mai binciken yanzu zai aika da bayanai game da sigar ƙirar ƙirar na'ura, ƙididdige nauyin kowane nau'i, da tuta don amfani da sabon ƙirar zuwa sabis na Binciken Tsaro na waje. .
- An cire saitin "Nuna shawarwarin shafuka masu kama da juna lokacin da ba a iya samun shafi", wanda ya haifar da shawarar shafuka iri ɗaya dangane da aika tambaya ga Google idan ba a sami shafin ba. A baya an cire wannan saitin daga sigar tebur.
- An faɗaɗa amfani da yanayin keɓewar rukunin yanar gizo don matakai guda ɗaya. Saboda dalilai na amfani da albarkatu, manyan zaɓaɓɓun rukunin yanar gizo ne kawai aka ƙaura zuwa matakai daban-daban. A cikin sabon sigar, keɓancewa kuma za ta fara aiki ga rukunin yanar gizon da mai amfani ya shiga tare da tantancewa ta hanyar OAuth (misali, haɗa ta asusun Google) ko wanda ya saita taken HTTP-Origin-Opener-Policy. Ga waɗanda ke son ba da damar keɓancewa a cikin tsarin kowane rukunin yanar gizo, an samar da saitin “chrome://flags/#enable-site-per-process”.
- Ingin na V8 na ingin na kariya daga hare-haren tashoshi na gefe kamar Specter ba su da rauni, waɗanda ba a la'akari da su da tasiri kamar keɓe shafuka a cikin matakai daban-daban. A cikin sigar tebur, waɗannan hanyoyin an kashe su a cikin sakin Chrome 70.
- Sauƙaƙan samun dama ga saitunan izini na rukunin yanar gizo, kamar makirufo, kamara, da shiga wurin. Don nuna jerin izini, kawai danna alamar makullin a cikin adireshin adireshin, sannan zaɓi sashin "Izini".
- An ƙara sabbin APIs da yawa zuwa Yanayin Gwaji na Asalin (fasali na gwaji waɗanda ke buƙatar kunnawa daban). Gwajin Asalin yana nuna ikon yin aiki tare da ƙayyadaddun API daga aikace-aikacen da aka zazzage daga localhost ko 127.0.0.1, ko bayan yin rijista da karɓar wata alama ta musamman wacce ke aiki na ƙayyadadden lokaci don takamaiman rukunin yanar gizo.
- Gudanar da Fayil na API, wanda ke ba ku damar yin rajistar aikace-aikacen yanar gizo azaman masu sarrafa fayil. Misali, aikace-aikacen yanar gizo da ke gudana a cikin yanayin PWA (Progressive Web Apps) tare da editan rubutu na iya yin rijistar kansa azaman mai sarrafa fayil na ".txt", bayan haka ana iya amfani da shi a cikin mai sarrafa fayil ɗin tsarin don buɗe fayilolin rubutu.
- API ɗin Canje-canje na Abubuwan Rabawa, wanda ke ba ku damar amfani da tasirin shirye-shiryen da mai binciken ya bayar wanda ke hango canje-canje a cikin yanayin mu'amala a cikin shafi ɗaya (SPA, aikace-aikacen shafi ɗaya) da shafuka masu yawa (MPA, aikace-aikacen shafuka masu yawa). ) aikace-aikacen yanar gizo.
- Gudanar da Fayil na API, wanda ke ba ku damar yin rajistar aikace-aikacen yanar gizo azaman masu sarrafa fayil. Misali, aikace-aikacen yanar gizo da ke gudana a cikin yanayin PWA (Progressive Web Apps) tare da editan rubutu na iya yin rijistar kansa azaman mai sarrafa fayil na ".txt", bayan haka ana iya amfani da shi a cikin mai sarrafa fayil ɗin tsarin don buɗe fayilolin rubutu.
- An ƙara ma'aunin daidaita girman-girma zuwa @font-face CSS dokar, wanda ke ba ka damar yin girman girman glyph don takamaiman salon rubutu ba tare da canza ƙimar girman girman girman CSS ba (yankin da ke ƙarƙashin halayen ya kasance iri ɗaya ne). , amma girman glyph a wannan yanki yana canzawa).
- A cikin JavaScript, abubuwan Array, String, da TypedArray suna aiwatar da hanyar a (), wanda ke ba ku damar amfani da firikwensin dangi (an ayyana matsayin dangi azaman jigon tsararru), gami da ƙayyadaddun ƙima mara kyau dangane da ƙarshen (misali, "arr.at(-1)" zai dawo da kashi na ƙarshe na tsararrun).
- An ƙara kayan ranaPeriod zuwa Intl.DateTimeFormat JavaScript maginin, wanda ke ba ku damar nuna kusan lokacin rana (safiya, maraice, rana, dare).
- Lokacin amfani da abubuwan SharedArrayBuffers, waɗanda ke ba ku damar ƙirƙirar tsararraki a cikin ƙwaƙwalwar ajiyar da aka raba, yanzu kuna buƙatar ayyana Manufofin Cross-Origin-Opener-Policy da Cross-Origin-Embedder-Policy HTTP headers, ba tare da abin da buƙatar za a toshe ba.
- Ayyukan “Togglemicrophone”, “Togglecamera” da “hangup” ayyuka an ƙara su zuwa Media Session API, ƙyale rukunin yanar gizon da ke aiwatar da tsarin taron bidiyo don haɗa nasu masu sarrafa nasu don bebe/cire, kamara a kashe/kunna da maɓallin ƙarewa da aka nuna a cikin kira-in-hoto dubawar dubawa.
- API ɗin yanar gizo na Bluetooth ya ƙara ikon tace na'urorin Bluetooth da aka samo ta masana'anta da masu gano samfur. An saita tace ta hanyar sigar “options.filters” a cikin hanyar Bluetooth.requestDevice().
- An aiwatar da matakin farko na datsa abubuwan da ke cikin mai amfani-Agent HTTP: shafin Abubuwan DevTools yanzu yana nuna gargaɗi game da ɓarna na navigator.userAgent, navigator.appVersion da navigator.platform.
- An yi wani ɓangare na haɓakawa ga kayan aiki don masu haɓaka gidan yanar gizo. Na'urar wasan bidiyo ta gidan yanar gizo tana ba da ikon sake fayyace maganganun "const". A cikin rukunin abubuwan, abubuwan iframe suna da ikon duba cikakkun bayanai cikin sauri ta hanyar menu na mahallin da ke bayyana lokacin da kake danna maɓallin dama. Ingantattun gyara kurakurai na CORS (Cross-origin sharing albarkatun) kurakurai. An ƙara ikon tace buƙatun cibiyar sadarwa daga WebAssembly zuwa kwamitin binciken ayyukan cibiyar sadarwa. An gabatar da sabon editan Grid na CSS ("nuni: grid" da "nuni: layi-grid") tare da aiki don samfoti canje-canje.
Baya ga sabbin abubuwa da gyare-gyaren kwaro, sabon sigar yana kawar da lahani 35. Yawancin raunin da aka gano sakamakon gwajin atomatik ta amfani da AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer da kayan aikin AFL. Ba a gano wata matsala mai mahimmanci da za ta ba mutum damar ƙetare duk matakan kariya na burauza ba da aiwatar da lamba akan tsarin a wajen yanayin sandbox. A matsayin wani ɓangare na shirin biyan tukuicin kuɗi don gano lahani ga sakin na yanzu, Google ya biya lambobin yabo 24 da suka kai $112000 (kyaututtuka na $15000, lambar yabo $10000, lambar yabo $8500 ɗaya, lambar yabo $7500 guda biyu, lambobin yabo $5000 guda uku, lambar yabo $3000 $500 $11. ). Har yanzu ba a tantance girman lada XNUMX ba.
source: budenet.ru