Chrome 93 saki

Google ya bayyana sakin mai binciken gidan yanar gizo na Chrome 93. A lokaci guda kuma, ana samun tabbataccen sakin aikin Chromium kyauta, wanda ke zama tushen Chrome. An bambanta mai binciken Chrome ta hanyar amfani da tambarin Google, kasancewar tsarin aika sanarwa idan akwai hadari, kayayyaki don kunna abun ciki na bidiyo mai kariya (DRM), tsarin shigar da sabuntawa ta atomatik, da watsa sigogin RLZ lokacin bincike. An tsara sakin Chrome 94 na gaba don Satumba 21 (an ci gaba zuwa zagayowar sakin mako 4).

Canje-canje masu mahimmanci a cikin Chrome 93:

• An sabunta ƙirar toshe tare da bayanan shafi (bayanan shafi), wanda a cikinsa aka aiwatar da tallafi ga tubalan gida, kuma an maye gurbin jerin abubuwan da aka saukar tare da haƙƙoƙin samun dama da masu sauyawa. Lissafin suna tabbatar da cewa an fara nuna mahimman bayanai da farko. Ba a kunna canjin ga duk masu amfani ba; don kunna shi, zaku iya amfani da saitin "chrome://flags/#page-info-version-2-desktop".
• Don ƙaramin kaso na masu amfani, azaman gwaji, an maye gurbin amintaccen alamar haɗin kai a mashigin adireshi tare da ƙarin alamar tsaka tsaki wanda baya haifar da fassarar sau biyu (an maye gurbin kulle da alamar "V"). Don haɗin haɗin da aka kafa ba tare da ɓoyewa ba, ana ci gaba da nuna alamar "ba amintacce" ba. Dalilin da ya sa aka maye gurbin alamar shine yawancin masu amfani suna danganta alamar makullin tare da gaskiyar cewa ana iya amincewa da abubuwan da ke cikin shafin, maimakon ganin shi a matsayin alamar cewa an ɓoye haɗin. Yin la'akari da binciken Google, kawai 11% na masu amfani sun fahimci ma'anar alamar tare da kulle.
• Lissafin shafukan da aka rufe kwanan nan suna nuna abubuwan da ke cikin rufaffiyar rufaffiyar shafuka (a baya jerin suna nuna sunan ƙungiyar kawai ba tare da cikakken bayanin abin da ke ciki ba) tare da ikon dawo da duka duka rukunin da shafuka ɗaya daga rukunin lokaci ɗaya. Ba a kunna fasalin ga duk masu amfani ba, don haka kuna iya buƙatar canza saitin "chrome://flags/#tab-restore-sub-menus" don kunna shi.
• Don kamfanoni, an aiwatar da sabbin saitunan: DefaultJavaScriptJitSetting, JavaScriptJitAllowedForSites da JavaScriptJitBlockedForSites, waɗanda ke ba ku damar sarrafa yanayin ƙarancin JIT, wanda ke hana amfani da tarin JIT lokacin aiwatar da JavaScript (kawai ana amfani da mai fassara Ignition) kuma ya hana rarraba aiwatarwa. ƙwaƙwalwar ajiya yayin aiwatar da code. Kashe JIT na iya zama da amfani don inganta tsaro na aiki tare da aikace-aikacen yanar gizo masu haɗari a farashin rage aikin JavaScript da kusan 17%. Abin lura ne cewa Microsoft ya ci gaba da aiwatar da yanayin gwaji na "Super Duper Secure" a cikin mai bincike na Edge, yana ba mai amfani damar kashe JIT kuma ya kunna hanyoyin tsaro na kayan aikin da ba na JIT ba CET (Fasahar Gudanarwa-Tsarin Ƙarfafawa), ACG (Arbitrary). Code Guard) da CFG (Mai Kula da Yawo) don sarrafa abun cikin gidan yanar gizo. Idan gwajin ya zama mai nasara, to muna iya tsammanin za a canza shi zuwa babban ɓangaren Chrome.
• Sabon shafin shafin yana ba da jerin shahararrun takaddun da aka adana a cikin Google Drive. Abubuwan da ke cikin jerin sun yi daidai da sashin fifiko a cikin drive.google.com. Don sarrafa nunin abun cikin Google Drive, zaku iya amfani da saitunan "chrome://flags/#ntp-modules" da "chrome://flags/#ntp-drive-module" saituna.
• An ƙara sabbin katunan bayanai zuwa Buɗe Sabon Shafin shafi don taimaka muku nemo abun ciki da aka duba kwanan nan da bayanai masu alaƙa. An tsara katunan ne don sauƙaƙe don ci gaba da aiki tare da bayanan da aka katse kallonsa, misali, katunan za su taimaka maka samun girke-girke na abincin da aka samo kwanan nan a kan layi amma ya ɓace bayan rufe shafin, ko kuma ci gaba da yin. sayayya a cikin shaguna. A matsayin gwaji, ana ba masu amfani da sabbin taswirori biyu: “Recipes” (chrome://flags/#ntp-recipe-tasks-module) don neman girke-girke na dafa abinci da nuna girke-girke da aka duba kwanan nan; "Siyayya" (chrome://flags/#ntp-chrome-cart-module) don tunatarwa game da samfuran da aka zaɓa a cikin shagunan kan layi.
• Sigar Android tana ƙara tallafi na zaɓi don ci gaba da bincike (chrome://flags/#continuous-search), wanda ke ba ku damar ci gaba da ganin sakamakon binciken Google na baya-bayan nan ( kwamitin yana ci gaba da nuna sakamako bayan ƙaura zuwa wasu shafuka).
• An ƙara yanayin raba ƙididdiga na gwaji zuwa nau'in Android (chrome://flags/#webnotes-stylize), wanda ke ba ku damar adana zaɓin guntun shafi a matsayin zance kuma raba shi tare da sauran masu amfani.
• Lokacin buga sabon ƙari ko sabuntawar sigar zuwa Shagon Yanar Gizo na Chrome, ana buƙatar tabbatarwa mai haɓaka abubuwa biyu yanzu.
• Masu amfani da Asusun Google suna da zaɓi don adana bayanan biyan kuɗi zuwa asusun Google ɗin su.
• A cikin yanayin incognito, idan zaɓin share bayanan kewayawa ya kunna, an aiwatar da sabon maganganun tabbatar da aiki, yana bayanin cewa share bayanan zai rufe taga kuma ya ƙare duk zaman cikin yanayin ɓoye.
• Sakamakon rashin daidaituwa da aka gano tare da firmware na wasu na'urori, goyan baya ga sabuwar hanyar yarjejeniyar maɓalli da aka ƙara zuwa Chrome 91, mai juriya ga zato akan kwamfutocin ƙididdiga, dangane da amfani da CECPQ1.3 (Haɗin Elliptic-Curve da Post-Quantum 2) tsawo a ciki TLSv2, haɗa tsarin musayar maɓalli na X25519 na yau da kullun tare da tsarin HRSS dangane da NTRU Prime algorithm wanda aka ƙera don tsarin ƙira-ƙira.
• An ƙara tashar jiragen ruwa 989 (ftps-data) da 990 (ftps) zuwa adadin haramtattun tashoshin sadarwa don toshe harin ALPACA. A baya can, don kare kai daga hare-haren zamewar NAT, an toshe tashoshin 69, 137, 161, 554, 1719, 1720, 1723, 5060, 5061, 6566 da 10080.
• TLS baya goyan bayan ciphers dangane da 3DES algorithm. Musamman, an cire TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher suite, wanda ke da saukin kamuwa da harin Sweet32.
• An daina tallafawa Ubuntu 16.04.
• Yana yiwuwa a yi amfani da WebOTP API tsakanin na'urori daban-daban da aka haɗa ta asusun Google gama gari. WebOTP yana ba da damar aikace-aikacen yanar gizo don karanta lambobin tabbatarwa na lokaci ɗaya da aka aika ta SMS. Canjin da aka gabatar ya ba da damar samun lambar tantancewa akan na'urar hannu da ke aiki da Chrome don Android, kuma a yi amfani da ita akan tsarin tebur.
• An faɗaɗa Alamar Abokin ciniki-Agent mai amfani API, haɓakawa azaman madadin mai amfani-Agent mai amfani. Alamun Abokin Abokin Mai amfani-Agent yana ba ku damar tsara zaɓaɓɓen isar da bayanai game da takamaiman mai bincike da sigogin tsarin (version, dandamali, da sauransu) kawai bayan buƙatar sabar. Mai amfani, bi da bi, zai iya ƙayyade irin bayanin da za a iya bayarwa ga masu rukunin yanar gizon. Lokacin amfani da Alamomin Abokin Ciniki na Wakilin Mai amfani, ba a aika mai gano mashigar ba tare da buƙatu na zahiri ba, kuma ta tsohuwa kawai ana ƙayyadaddun sigogi na asali, wanda ke sa ganowa da wahala.

  Sabuwar sigar tana goyan bayan siginar Sec-CH-UA-Bitness don dawo da bayanai game da bitness na dandamali, wanda za'a iya amfani dashi don hidimar ingantattun fayilolin binary. Ta hanyar tsoho, ana aika ma'aunin Sec-CH-UA-Platform tare da bayanan dandamali gabaɗaya. Ƙimar UADataValues ​​ta dawo lokacin da ake kira getHighEntropyValues ​​() ana aiwatar da shi ta tsohuwa don dawo da sigogi na gaba ɗaya idan ba zai yiwu a dawo da cikakken zaɓi ba. Hanyar zuwaJSON an ƙara zuwa abu NavigatorUData, wanda ke ba ka damar amfani da gine-gine kamar JSON.stringify(navigator.userAgentData).

• Ikon tattara albarkatu cikin fakiti a cikin Tsarin Bundle na Yanar Gizo, wanda ya dace da tsara ingantaccen lodi na adadin fayiloli masu rakiyar (salon CSS, JavaScript, hotuna, iframes), an daidaita kuma ana bayarwa ta tsohuwa. Daga cikin gazawar da ke cikin goyon bayan fakitoci don fayilolin JavaScript (packwebpack), wanda Rukunin Yanar Gizo ke ƙoƙarin kawar da su: kunshin kanta, amma ba sassan sassanta ba, na iya ƙarewa a cikin cache HTTP; tattarawa da aiwatarwa na iya farawa ne kawai bayan an gama saukar da kunshin gaba ɗaya; Ƙarin albarkatun kamar CSS da hotuna dole ne a sanya su a cikin nau'in kirtani na JavaScript, wanda ke ƙara girma kuma yana buƙatar wani mataki na tantancewa.
• An haɗa API ɗin Gano Jirgin Jirgin Ruwa na WebXR, yana ba da bayanai game da shimfidar tsari a cikin yanayin 3D kama-da-wane. API ɗin ƙayyadadden ƙayyadaddun bayanai yana ba da damar gujewa sarrafa albarkatun bayanai da aka samu ta hanyar kiran MediaDevices.getUserMedia(), ta yin amfani da aiwatar da mallakar mallaka na algorithms hangen nesa na kwamfuta. Bari mu tunatar da ku cewa API ɗin WebXR yana ba ku damar haɗa aiki tare da nau'ikan na'urori na gaskiya daban-daban, daga kwalkwali na 3D na tsaye zuwa mafita dangane da na'urorin hannu.
• An ƙara sabbin APIs da yawa zuwa Yanayin Gwaji na Asalin (fasali na gwaji waɗanda ke buƙatar kunnawa daban). Gwajin Asalin yana nuna ikon yin aiki tare da ƙayyadaddun API daga aikace-aikacen da aka zazzage daga localhost ko 127.0.0.1, ko bayan yin rijista da karɓar wata alama ta musamman wacce ke aiki na ƙayyadadden lokaci don takamaiman rukunin yanar gizo.
  • An ba da shawarar API ɗin Sanya Window Multi-Screen, wanda ke ba ka damar sanya windows akan kowane nuni da aka haɗa da tsarin yanzu, da kuma adana matsayin taga kuma, idan ya cancanta, faɗaɗa taga zuwa cikakken allo. Misali, ta yin amfani da ƙayyadaddun API, aikace-aikacen yanar gizo don nuna gabatarwa na iya tsara nunin nunin faifai akan allo ɗaya, da kuma nuna bayanin kula ga mai gabatarwa akan wani.
  • Maganin Cross-Origin-Embedder-Policy, wanda ke sarrafa yanayin keɓewar Asalin Cross-Origin kuma yana ba ku damar ayyana amintattun ƙa'idodin amfani akan shafin Ayyukan Gata, yanzu yana goyan bayan ma'aunin "marasa shaidar" don musaki watsa bayanan da suka danganci takaddun shaida kamar su. Kukis da takaddun shaida na abokin ciniki.
  • Don aikace-aikacen gidan yanar gizo kaɗai (PWA, Progressive Web Apps) waɗanda ke sarrafa sarrafa abubuwan da ke cikin taga da kuma sarrafa shigarwar, an samar da abin rufe fuska tare da sarrafa taga, kamar sandar take da maɓallan faɗaɗa/ rugujewa. Mai rufi yana faɗaɗa wurin da za'a iya gyarawa don rufe taga gabaɗaya kuma yana ba ku damar ƙara abubuwan naku zuwa yankin take.
  • An ƙara ikon ƙirƙirar aikace-aikacen PWA waɗanda za a iya amfani da su azaman masu sarrafa URL. Misali, aikace-aikacen music.example.com na iya yin rijista da kansa a matsayin mai kula da URL https://*.music.example.com kuma duk canzawa daga aikace-aikacen waje ta amfani da waɗannan hanyoyin haɗin gwiwa, misali, daga saƙon nan take da abokan cinikin imel, za su jagoranci. zuwa buɗe wannan aikace-aikacen PWA, ba sabon shafin burauza ba.
• Yana yiwuwa a loda fayilolin CSS ta amfani da kalmar "shigo da", kama da loda kayan aikin JavaScript, wanda ya dace lokacin ƙirƙirar abubuwan ku kuma yana ba ku damar yin ba tare da sanya salo ta amfani da lambar JavaScript ba. shigo da takardar daga './styles.css' tabbatarwa {nau'in: 'css'}; document.adoptedStyleSheets = [sheet]; shadowRoot.adoptedStyleSheets = [sheet];
• An samar da wata sabuwar hanya madaidaiciya, AbortSignal.abort(), wacce ke dawo da abin AbortSignal wanda tuni aka saita don zubarwa. Maimakon layukan lamba da yawa don ƙirƙirar abu AbortSignal a cikin jihar da aka zubar, yanzu zaku iya samun ta da layi ɗaya na "dawo AbortSignal.abort()".
• Ƙarshen Flexbox ya ƙara goyon baya don farawa, ƙarshen, farawa kai tsaye, ƙarshen kai, hagu da dama keywords, ƙaddamar da tsakiya, farawa da flex-keywords keywords tare da kayan aiki don sauƙaƙe daidaitawa na matsayi na abubuwa masu sassauƙa.
• Maginin Kuskuren () yana aiwatar da sabon zaɓi na “dalilin” dukiya, wanda ke ba ku damar haɗa kurakurai cikin sauƙi tare da juna. const parentError = sabon Kuskure('iyaye'); kuskuren const = sabon Kuskure ('iyaye', {dalilin: Kuskuren iyaye}); console.log (kuskure.cause === Kuskuren iyaye); // → gaskiya
• Ƙara goyon baya ga yanayin noplaybackrate zuwa kayan HTMLMediaElement.controlsList, wanda ke ba ka damar musaki abubuwan da aka tanadar a cikin mai bincike don canza saurin sake kunnawa na abun cikin multimedia.
• An ƙara da Sec-CH-Prefers-Color-Scheme header, wanda ke ba da damar, a matakin aikawa da buƙatun, don watsa bayanai game da tsarin launi da aka fi so da mai amfani a cikin tambayoyin kafofin watsa labarai na "fifi-launi-makirci", wanda zai ba da damar rukunin yanar gizon don ingantawa. da lodi na CSS hade da zaɓaɓɓen makirci da kuma kauce wa bayyane canje-canje daga wasu makircinsu.
• An ƙara kayan Object.hasOwn, wanda shine sauƙaƙan sigar Object.prototype.hasOwnProperty, aiwatar da shi azaman tsayayyen hanya. Object.hasOwn ({prop: 42}, 'prop') // → gaskiya
• An ƙera shi don tattara ƙarfi-ƙarfi mai sauri, Sparkplug's JIT compiler ya ƙara yanayin aiwatar da tsari don rage saman jujjuya shafukan ƙwaƙwalwa tsakanin rubutu da yanayin aiki. Sparkplug yanzu yana tattara ayyuka da yawa a lokaci ɗaya kuma yana kiran mproct sau ɗaya don canza izini na duka ƙungiyar. Yanayin da aka tsara yana rage girman lokacin tattarawa (har zuwa 44%) ba tare da yin tasiri mara kyau ga aikin aiwatar da JavaScript ba.
• Sigar Android tana hana ginanniyar kariyar injin V8 daga hare-haren tashoshi na gefe kamar Specter, waɗanda ba a la'akari da su da tasiri kamar keɓance shafuka daban-daban. A cikin sigar tebur, waɗannan hanyoyin an kashe su a cikin sakin Chrome 70. Kashe rajistan ayyukan da ba dole ba an ba da izinin haɓaka aiki ta 2-15%.
• An inganta kayan aiki don masu haɓaka gidan yanar gizo. A cikin salon duba takardar, yana yiwuwa a gyara tambayoyin da aka samar ta amfani da bayanin @container. A cikin yanayin duba hanyar sadarwa, ana aiwatar da samfoti na albarkatu a cikin tsarin bundle ɗin Yanar. A cikin na'ura wasan bidiyo na yanar gizo, an ƙara zaɓuɓɓuka don kwafin kirtani a cikin nau'in JavaScript ko JSON na zahiri zuwa menu na mahallin. Ingantattun gyara kurakurai masu alaƙa da CORS (Raba albarkatun tushen tushen tushen).

Baya ga sabbin abubuwa da gyare-gyaren kwaro, sabon sigar yana kawar da lahani 27. Yawancin raunin da aka gano sakamakon gwajin atomatik ta amfani da AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer da kayan aikin AFL. Ba a gano wata matsala mai mahimmanci da za ta ba mutum damar ƙetare duk matakan kariya na burauza ba da aiwatar da lamba akan tsarin a wajen yanayin sandbox. A matsayin wani ɓangare na shirin biyan tukuicin kuɗi don gano lahani ga sakin na yanzu, Google ya biya lambobin yabo 19 da suka kai $136500 (kyaututtuka na $20000 uku, lambar yabo $15000, lambobin yabo $10000, lambar yabo $7500 ɗaya, lambobin yabo $5000 uku, lambobin yabo $3000 da $5). Har yanzu ba a tantance girman lada guda XNUMX ba.

source: budenet.ru