An saki mai binciken gidan yanar gizon Kuma Firefox 68.4 don dandamali na Android. Bugu da kari, an samar da sabuntawa tare da dogon lokaci goyon baya . Nan da nan zuwa mataki reshen Firefox 73 zai wuce, wanda aka tsara sakinsa a ranar 11 ga Fabrairu (aikin na makonni 4 ).
:
- A cikin tsoho daidaitaccen yanayin toshewa don abun ciki mara dacewa kariya daga bin diddigin mai amfani ta amfani da boyayyun hanyoyin tantancewa (“binciken yatsa mai lilo”), wanda ake aiwatar da shi a cikin jerin Disconnect.me, wanda ya haɗa da runduna da aka gano suna amfani da rubutun don ɓoye ɓoye. Ƙoyayyun ganewa yana nufin ajiyar abubuwan ganowa a wuraren da ba a yi niyya don adana bayanan dindindin ba ("Supercookies"), da kuma ƙirƙira abubuwan ganowa bisa bayanan kai tsaye, kamar su. , jerin nau'ikan MIME masu goyan baya, takamaiman sigogi a cikin rubutun kai ( и ), nazarin shigar , samuwan wasu APIs na Yanar Gizo, musamman ga katunan bidiyo yin amfani da WebGL da Canvas, tare da CSS, nazarin fasali na aiki tare da и .
- hanyoyin tare da buƙatun ban haushi don baiwa rukunin izini ƙarin izini (Sanarwa.requestPermission(), PushManager.subscribe() da MediaDevices.getDisplayMedia()). Buƙatun tabbatar da hukuma ba za su ƙara katse aiki tare da mai lilo ba, amma zai kai ga nunin mai nuna alama a mashigin adireshi bayan an yi rikodin hulɗar mai amfani da shafin (latsa linzamin kwamfuta ko latsa maɓalli). Shafukan da yawa suna cin zarafin fasalin neman izini da masu bincike suka bayar, musamman ta hanyar neman sanarwar turawa lokaci-lokaci. Binciken telemetry ya nuna cewa an ƙi 97% na irin waɗannan buƙatun, gami da a cikin 19% na lokuta mai amfani nan da nan ya rufe shafin ba tare da danna maɓallin yarda ko ƙi ba.
- na gwaji HTTP/3 yarjejeniya (don kunna game da: config kuna buƙatar saita zaɓin "network.http.http3.enabled"). Tallafin HTTP/3 a Firefox ya dogara ne akan , an rubuta cikin harshen Rust, aiwatar da abokin ciniki da uwar garken ƙa'idar QUIC (HTTP/3) amfani da ƙa'idar QUIC azaman jigilar kayayyaki don HTTP/2).
- Dangane da bukatun dokar da ta fara aiki (Dokar Sirri na Masu Amfani da California) ikon share bayanan telemetry daga sabobin Mozilla. Ana share bayanai idan kun ƙi tattara telemetry a cikin "game da: abubuwan da ake so # sirri" ("Sashen Tarin Bayanai da Amfani da Firefox). Lokacin da kuka share "Bada Firefox ta aika bayanan fasaha da hulɗa zuwa Mozilla" akwatin rajistan wanda ke sarrafa aika telemetry, Mozilla tsakanin kwanaki 30 duk bayanan da aka tattara a lokacin da ya kai ga gazawar watsa na'urar. Bayanan da ke ƙarewa a kan sabobin Mozilla yayin tsarin tarin telemetry sun haɗa da bayanai game da aikin Firefox, tsaro, da ma'auni na gabaɗaya kamar adadin buɗaɗɗen shafuka da tsawon lokaci (bayani game da rukunin yanar gizon da aka buɗe da tambayoyin bincike ba a aika su). Ana iya duba cikakkun bayanan bayanan da aka tattara akan shafin "game da: telemetry".
- Don Linux da macOS, an ƙara ikon duba bidiyo a yanayin Hoto-in-Hoto, yana ba ku damar cire bidiyon a cikin hanyar taga mai iyo wanda ya kasance bayyane yayin kewayawa a cikin mai lilo. Don kallo a cikin wannan yanayin, kuna buƙatar danna maɓallin kayan aiki ko a cikin mahallin mahallin da aka nuna lokacin da kuka danna maɓallin dama akan bidiyon, zaɓi "Hoto a cikin hoto" (a cikin YouTube, wanda ya maye gurbin mai sarrafa menu na mahallin, ya kamata ku yi dama- danna sau biyu ko danna tare da danna maɓallin Shift).
- Lokacin da aka nuna sandar gungurawa launin baya na shafin na yanzu.
- maɓallan maɓalli na jama'a (PKP, Pinning Maɓallin Jama'a), wanda ke ba da izini, ta amfani da jigon Jama'a-Key-Pins HTTP, don tantance takaddun takaddun takaddun waɗanda za a iya amfani da hukumomin takaddun shaida don wani rukunin yanar gizon. Dalilin da aka ambata shine ƙarancin buƙatar wannan aikin, haɗarin matsalolin daidaitawa (goyan bayan PKP a cikin Chrome) da kuma ikon toshe rukunin yanar gizon ku saboda ɗaure maɓallan da ba daidai ba ko asarar maɓalli (misali, gogewa na bazata ko sasantawa sakamakon hacking).
- A abun da ke ciki ba da izini a cikin OpenBSD kira tsarin и don ƙarin tsarin fayil da keɓewar tsari.
- Goyan bayan da aka cire don toshe hotuna daga kowane yanki. Dalilin cirewa shine rashin buƙatar aikin tsakanin masu amfani da kuma rashin dacewa don toshewa.
- A cikin gine-gine don Windows, an aiwatar da fasalin gwaji don amfani da takaddun shaida na abokin ciniki daga babban kantin sayar da takardar shedar tsarin aiki (dole ne a kunna zaɓin security.osclientcerts.autoload don kunna shi cikin kusan:config).
- An kunna goyan bayan sassan Shadow na CSS ta tsohuwa, gami da ""da kuma pseudo-element"", yana ba ku damar nuna takamaiman abubuwan da aka zaɓa daga .
A sakin layi
a cikin CSS don zaɓar abubuwan da ke daure zuwa sifa:
Abun al'ada:: sashi (misali) {
iyaka: m 1px baki;
iyakar-radius: 5px;
Dama: 5px;
} - Ƙara tallafin ƙayyadaddun bayanai , wanda ke ba ka damar ayyana hanyar abubuwan rayarwa ta amfani da CSS ba tare da yin amfani da lambar JavaScript ba kuma ba tare da toshe tsarin nunawa da shigar da bayanai ba yayin motsi. Ana ba da kaddarorin CSS don sarrafa motsin rai
,
,
,
и
. - Ana kunna kaddarorin canza canjin CSS ta tsohuwa , и , ba a ɗaure ga dukiya (watau a cikin CSS yanzu zaku iya ƙayyade "ma'auni: 2;" maimakon "canji: sikelin (2);").
- JavaScript yana aiwatar da ma'aikacin haɗin gwiwar ma'ana"", wanda ke mayar da operand dama idan operand na hagu NULL ne ko ba a bayyana shi ba, kuma akasin haka. Misali, "const foo = bar ?? 'default string'" idan mashaya ba ta da amfani zai dawo da darajar mashaya in ba haka ba, gami da lokacin da mashaya ke 0 da '' '', sabanin mai aiki "||".
- API ɗin da aka ƙara da taron , wanda ke ba da damar yin amfani da masu sarrafa JavaScript don ƙara bayanai a cikin fom ɗin lokacin da aka ƙaddamar da shi, ba tare da adana bayanan a cikin abubuwan shigar da aka ɓoye ba.
- API sabunta don dacewa da sabon ƙayyadaddun bayanai, misali mai suna Coordinates zuwa GeolocationCoordinates, Matsayi zuwa GeolocationPosition da
Kuskuren Matsayi a GeolocationPositionError. - A cikin JavaScript debugger goyon baya ga wuraren karya sharaɗi (), jawo lokacin da aka canza ko karanta wasu kaddarorin abubuwa.
- An haɓaka farawa na mai gyara JavaScript lokacin da aka buɗe babban adadin shafuka (da farko, yanzu ana ba da fifiko ga shafuka masu gani).
- Yanayin ƙira mai amsawa yana aiwatar da kwaikwaiyo na mabambantan ƙimar duban meta. Ƙara "maɓallin-launi-tsari" mai ƙima zuwa yanayin duba shafi.
- В a cikin yanayin fassarar JavaScript da yawa, ƙarin tallafi don adanawa da buɗe fayiloli ta amfani da haɗin gwiwar Ctrl + O da Ctrl + S.
- kafa javascript.options.asyncstack don raba saƙonnin asynchronous na gani a cikin na'ura mai kwakwalwa ta yanar gizo. Lokacin da kuka kunna saitunan console.trace() da console.error(), ana nuna cikakken tarin kira na ayyukan asynchronous, yana ba ku damar fahimtar yadda ake tsara ƙaddamar da masu ƙidayar lokaci, abubuwan da suka faru, alkawura, janareta, da sauransu.
- A cikin yanayin duba WebSocket, an aiwatar da tantancewa da nunin gani na metadata a cikin sigar SignalR da aka yi amfani da su a cikin saƙonnin ASP.NET. An kuma ƙara ma'auni waɗanda ke nuna jimlar girman bayanan da aka aika da zazzagewa.
- A cikin kayan aiki don saka idanu ayyukan cibiyar sadarwa a cikin shafin Timeings daban bayani game da lokacin da kowace hanya aka yi layi don saukewa, lokacin da aka fara saukewa, da lokacin da aka gama saukewa.
- An cire mahalli daga kayan aiki don masu haɓaka gidan yanar gizo , An ƙirƙira don gwaji tare da lambar JavaScript (An maye gurbin Scratchpad a cikin sakin karshe ta yanayin wasan bidiyo na yanar gizo da yawa).
Baya ga sabbin abubuwa da gyaran kwaro, Firefox 72 ta gyara , wanda 11 (an tattara a ƙarƙashin и ) an yi musu alama a matsayin mai yuwuwar haifar da kisa ga masu hari lokacin buɗe shafuka na musamman. Bari mu tunatar da ku cewa matsalolin ƙwaƙwalwar ajiya, irin su buffer ambaliya da samun dama ga wuraren ƙwaƙwalwar ajiya da aka riga aka warware, kwanan nan an yi musu alama a matsayin haɗari, amma ba mahimmanci ba. Hakanan na musamman bayanin kula shine batun CVE-2019-17017 a cikin lambar XPCVariant.cpp, wanda kuma zai iya haifar da aiwatar da lambar.
source: budenet.ru