An fito da mai binciken gidan yanar gizon Firefox 119 kuma an ƙirƙiri sabunta reshen tallafi na dogon lokaci - 115.4.0. An canza reshen Firefox 120 zuwa matakin gwajin beta, wanda aka tsara fitar da shi a ranar 21 ga Nuwamba.
Mabuɗin sabbin abubuwa a cikin Firefox 119:
- An gabatar da wani sabon bincike don shafin View Firefox, wanda ya sauƙaƙa samun damar abun ciki da aka gani a baya. Shafin View Firefox yana tattara bayanai game da shafuka masu aiki, shafukan da aka duba kwanan nan, rufaffiyar shafuka, da shafuka daga wasu na'urori a wuri guda. Sabuwar sigar Firefox View tana ba da bayanai game da duk shafukan da aka buɗe a kowace taga, kuma yana ƙara ikon duba tarihin binciken ku da aka jera ta kwanan wata ko shafi.

- Ana kunna ikon shigo da add-ons daga Chrome da masu bincike bisa injin Chromium. A cikin maganganun shigo da bayanai daga wasu masu bincike ("Import Data" akan game da: fifikon # general page), zaɓi ya bayyana don canja wurin add-ons. Canja wurin ya ƙunshi jerin add-ons 72, waɗanda ke kwatanta masu gano abubuwan ƙarawa iri ɗaya waɗanda ke wanzu don Chrome da Firefox. Idan add-ons daga jerin suna nan lokacin shigo da bayanai daga Chrome, Firefox tana shigar da sigar Firefox ta asali maimakon sigar Chrome ta add-on.

- Taimako ga tsarin ECH (Encrypted Client Hello) an haɗa shi, wanda ke ci gaba da haɓaka ESNI (Ƙarar Sunan uwar garken da aka ɓoye) kuma ana amfani dashi don ɓoye bayanai game da sigogin zaman TLS, kamar sunan yankin da aka nema. Babban bambanci tsakanin ECH da ESNI shine cewa maimakon yin rufa-rufa a matakin kowane filayen, ECH yana ɓoye duk saƙon TLS ClientHello, wanda ke ba ku damar toshe leaks ta filayen da ESNI ba ta rufe, misali, PSK (Pre-Shared). Key) filin.
- Ƙarfin gyara daftarin aikin mai duba PDF a ciki yanzu ya haɗa da goyan baya don saka hotuna da bayanan rubutu, baya ga zanen layi na hannun kyauta da aka samo a baya da haɗa sharhin rubutu. Ana kunna sabon yanayin gyaran PDF don wasu masu amfani kawai; don tilasta shi akan game da: config page, dole ne ku kunna saitunan "pdfjs.enableStampEditor".

- Canja saituna masu alaƙa da maido da zaman da aka katse bayan fita mai lilo. Ba kamar fitowar da ta gabata ba, bayani game da ba kawai shafuka masu aiki ba, har ma da shafukan da aka rufe kwanan nan za a adana su a tsakanin zaman, ba ku damar dawo da rufaffiyar shafuka ba da gangan ba bayan sake farawa kuma duba jerin su a Firefox View. Ta hanyar tsoho, shafuka 25 na ƙarshe da aka buɗe a cikin kwanaki 7 na ƙarshe za a adana su. Hakanan za a yi la'akari da bayanai game da shafukan da ke cikin rufaffiyar windows kuma za a sarrafa jerin abubuwan da aka rufe a cikin mahallin duk windows a lokaci guda, ba kawai taga na yanzu ba.
- An faɗaɗa iyawar Yanayin Kariyar Kuki ɗin Jima'i, wanda a cikinsa ake amfani da keɓantaccen ajiyar kuki ga kowane rukunin yanar gizon, wanda baya ba da damar amfani da Kukis don bin diddigin motsi tsakanin rukunin yanar gizon (duk cookies ɗin da aka saita daga katangar ɓangare na uku da aka ɗora akan shafin. site (iframe, js, da sauransu) .p.), suna da alaƙa da rukunin yanar gizon da aka saukar da waɗannan tubalan). Sabuwar sigar tana aiwatar da warewar tsarin URI “blob:…” (Blob URL), wanda za a iya amfani da shi don isar da bayanan da suka dace da bin diddigin mai amfani.
- Ga masu amfani da ingantacciyar hanyar kariya ta bin diddigi (ETP, Ingantaccen Kariyar Bibiyar), ana ba da ƙarin kariya daga tantance masu amfani kai tsaye ta hanyar nazarin rubutu - fonts ɗin da ake iya gani ga rukunin yanar gizon suna iyakance ga tsarin rubutu da haruffa daga daidaitattun saitin harshe.
- Fakitin snap Firefox yana ba da tallafi don amfani da maganganun zaɓin fayil ɗin Ubuntu na asali lokacin samun damar bayanai daga wasu masu bincike, da kuma goyan baya don tantance abubuwan da ake samu dangane da shigar xdg-desktop-portal.
- Ƙara goyon baya don zaɓar mai saka idanu don sanya taga mai bincike yana gudana a yanayin kiosk na Intanet. An zaɓi mai saka idanu ta amfani da zaɓin layin umarni "-kiosk-monitor". Mai lilo ya canza zuwa yanayin cikakken allo nan da nan bayan ƙaddamar da yanayin kiosk.
- An dakatar da gano abun cikin mai jarida a cikin fayilolin da aka sarrafa tare da nau'in MIME "application/octet-stream". Don irin waɗannan fayilolin, mai binciken yanzu zai sa ka sauke fayil ɗin maimakon fara kunna shi.
- A cikin shirye-shiryen haɗa Firefox na toshe kuki na ɓangare na uku, an sabunta aiwatar da API ɗin Ma'ajiyar Adana don faɗakar da mai amfani don izinin samun damar ajiyar kuki daga iframe lokacin da aka toshe Kukis na ɓangare na uku ta tsohuwa. Sabon aiwatarwa ya inganta kariya kuma ya kara canje-canje don guje wa matsaloli tare da shafuka.
- Don abubuwan al'ada (Custom Element), waɗanda ke haɓaka ayyukan abubuwan HTML ɗin da ke wanzu, an haɗa da goyan bayan halayen ARIA (Accessible Rich Internet Applications), yana sa waɗannan abubuwan sun fi dacewa ga mutanen da ke da nakasa. Ƙara ikon saitawa da karanta halayen ARIA kai tsaye don abubuwan DOM (misali, buttonElement.ariaPressed = "gaskiya") ba tare da kiran hanyoyin saitinAttribute da samunAttribute ba.
- Maganin Cross-Origin-Embedder-Policy HTTP, wanda ke sarrafa yanayin keɓewar Asalin Cross-Origin kuma yana ba ku damar ayyana amintattun ƙa'idodin amfani akan shafi na ayyuka masu gata, ya ƙara goyan baya ga ma'aunin “marasa shaidar” don murkushe watsa abubuwan da suka danganci shaidar. bayanai kamar Kukis da takaddun shaida na abokin ciniki.
- Aikin attr() CSS yanzu yana da ikon tantance hujja ta biyu, wadda za a yi amfani da ƙimarta a yanayin da ƙayyadadden sifa ya ɓace ko yana da ƙima mara inganci. Misali, attr (foobar, "Default value").
- Added Object.groupBy da Map.groupBy hanyoyin don haɗa abubuwan tsararru ta amfani da ƙimar kirtani da aka dawo da aikin dawo da kira, wanda ake kira ga kowane ɓangaren tsararru, azaman maɓallin haɗawa.
- Hanyoyi da aka ƙara: String.prototype.isWellFormed() don bincika kasancewar rubutun Unicode daidai da aka ƙera a cikin kirtani (kawai an duba cikakken "surrogate nau'i-nau'i" na haruffan mahalli) da String.prototype.toWellFormed() don tsaftacewa da canza rubutun Unicode. cikin tsari daidai .
- Hanyoyin WebTransport.createBidirectionalStream() da WebTransport.createUnidirectionalStream() hanyoyin sun ƙara goyon baya ga kayan "sendOrder" don saita fifikon dangi na rafukan da aka aika.
- API ɗin AuthenticatorAttestationResponse yana ba da sababbin hanyoyin samunPublicKey(), GetPublicKeyAlgorithm() da kuma samunAuthenticatorData().
- API ɗin Tabbatar da Yanar Gizo ya ƙara tallafi don kaddarorin credProps, waɗanda ke ba ku damar tantance kasancewar takaddun shaida bayan ƙirƙira ko rajista.
- Ƙara parseCreationOptionsDagaJSON(), parseRequestOptionsDagaJSON() da kuma zuwaJSON() hanyoyin zuwa PublicKeyCredential API don juyar da abubuwa zuwa wakilcin JSON da ya dace da serialization/deserialization da canja wuri zuwa uwar garken.
- A cikin kayan aikin na masu haɓaka gidan yanar gizo, an inganta haɗin gwiwar aiki tare da CSS (Sillolin CSS marasa aiki), wanda ya haɗa da ikon gano kaddarorin CSS waɗanda ba su shafi kashi ba, kuma sun ƙara cikakken goyan baya ga abubuwan ƙira, kamar su. ":: harafi na farko", ":: cue" da ":: mai sanya wuri".
- Mai duba bayanan JSON da aka gina a ciki yana canzawa ta atomatik zuwa duba danyen bayanai idan bayanan JSON da ake duba ba daidai bane ko lalacewa.
- A kan dandalin Windows, ƙarin tallafi don saitin tsarin da ke ɓoye siginan kwamfuta yayin bugawa.
- A cikin nau'in dandamali na Android, an kawar da haɗarin da ke faruwa lokacin kallon bidiyo a cikin cikakken allo. Ƙarin tallafi don fifiko-bambanta da fi son-rage-fahimtar tambayoyin kafofin watsa labarai a cikin yanayin Android 14.
Baya ga sabbin abubuwa da gyare-gyaren kwaro, Firefox 119 ya gyara lahani 25. Lalacewar 17 (16 haɗe a ƙarƙashin CVE-2023-5730 da CVE-2023-5731) waɗanda aka yiwa alama a matsayin haɗari suna haifar da matsalolin ƙwaƙwalwa, irin su buffer ambaliya da samun damar zuwa wuraren ƙwaƙwalwar ajiya da aka rigaya. Mai yuwuwa, waɗannan matsalolin na iya haifar da aiwatar da lambar maharin lokacin buɗe shafuka na musamman. Wani lahani mai haɗari (CVE-2023-5721) yana ba da damar danna jacking don tabbatarwa ko soke wasu maganganu ko faɗakarwa.
source: budenet.ru



