Firefox 74 saki

An saki mai binciken gidan yanar gizon Firefox 74Kuma sigar wayar hannu Firefox 68.6 don dandamali na Android. Bugu da kari, an samar da sabuntawa rassa tare da dogon lokaci goyon baya 68.6.0. Nan da nan zuwa mataki gwajin beta reshen Firefox 75 zai wuce, wanda aka tsara sakinsa don Afrilu 7 (aikin motsi na makonni 4-5 ci gaban sake zagayowar). Don Firefox 75 reshen beta ya fara siffata majalisai don Linux a cikin tsarin Flatpak.

Main sababbin abubuwa:

  • Gina Linux suna amfani da tsarin keɓewa RLBox, da nufin toshe amfani da rauni a cikin ɗakunan karatu na ayyuka na ɓangare na uku. A wannan matakin, keɓancewa kawai ake kunna don ɗakin karatu Graphite, alhakin samar da haruffa. RLBox yana tattara lambar C/C++ na ɗakin karatu da aka keɓe zuwa lambar matsakaiciyar matsakaiciyar matakin WebAssembly, wanda sannan aka ƙirƙira shi azaman rukunin yanar gizon yanar gizon, an saita izinin sa dangane da wannan rukunin kawai. Tsarin da aka haɗa yana aiki a cikin keɓan wurin ƙwaƙwalwar ajiya kuma baya da damar zuwa sauran sararin adireshin. Idan an yi amfani da rauni a cikin ɗakin karatu, maharin za a iyakance shi kuma ba zai iya samun dama ga wuraren ƙwaƙwalwar ajiya na babban tsari ko canja wurin sarrafawa a waje da keɓaɓɓen yanayi.
  • DNS akan yanayin HTTPS (DoH, DNS akan HTTPS) kunna ta tsohuwa ga masu amfani da Amurka. Tsohuwar mai bada DNS shine CloudFlare (mozilla.cloudflare-dns.com jera в toshe lists Roskomnadzor), kuma NextDNS yana samuwa azaman zaɓi. Canja mai bada ko ba da damar DoH a cikin ƙasashe ban da Amurka, iya a cikin saitunan haɗin cibiyar sadarwa. Kuna iya karanta ƙarin game da DoH a Firefox a sanarwa daban.

    Firefox 74 saki

  • An kashe goyon bayan TLS 1.0 da TLS 1.1 ladabi. Don samun dama ga shafuka akan amintaccen tashar sadarwa, dole ne uwar garken ta ba da goyan baya ga aƙalla TLS 1.2. A cewar Google, a halin yanzu kusan 0.5% na zazzagewar shafin yanar gizon ana ci gaba da aiwatar da su ta amfani da tsoffin juzu'in TLS. An gudanar da aikin rufewa kamar yadda ya kamata shawarwari IETF (Kwamar aikin Injiniya ta Intanet). Dalilin ƙin tallafa wa TLS 1.0 / 1.1 shine rashin tallafi ga ciphers na zamani (misali, ECDHE da AEAD) da kuma buƙatar da ake bukata don tallafawa tsofaffin ma'auni, wanda ake tambayar amincinsa a halin yanzu na ci gaban fasahar kwamfuta ( misali, ana buƙatar tallafi don TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA, ana amfani da MD5 don tantance gaskiya da tantancewa da SHA-1). Lokacin ƙoƙarin amfani da TLS 1.0 da TLS 1.1 farawa da Firefox 74, za a nuna kuskure. Kuna iya dawo da ikon yin aiki tare da tsoffin juzu'in TLS ta hanyar saita security.tls.version.enable-deprecated = gaskiya ko ta amfani da maɓallin akan shafin kuskure da aka nuna lokacin ziyartar rukunin yanar gizo tare da tsohuwar yarjejeniya.
    Firefox 74 saki

  • Bayanan saki yana ba da shawarar ƙarawa Kwantena na Facebook, wanda ta atomatik toshe aikace-aikacen Facebook na ɓangare na uku da aka yi amfani da su don tantancewa, yin sharhi, da kuma liking. Ana keɓance sigogin tantancewa na Facebook a cikin wani akwati dabam, wanda ke sa da wuya a iya tantance mai amfani da shafukan da suke ziyarta. Ikon yin aiki tare da babban shafin Facebook ya rage, amma an keɓe shi daga wasu shafuka.

    Don ƙarin sassaucin keɓanta na rukunin yanar gizo, ana ba da shawarar ƙarawa Maɓuɓɓukan Asusu da yawa tare da aiwatar da manufar mahallin kwantena. Kwantena suna ba da damar ware nau'ikan abun ciki daban-daban ba tare da ƙirƙirar bayanan martaba daban ba, wanda ke ba ku damar raba bayanan ƙungiyoyin shafuka daban-daban. Misali, zaku iya ƙirƙira keɓance, keɓance wurare don sadarwar sirri, aiki, siyayya da mu'amalar banki, ko tsara yin amfani da asusun masu amfani daban-daban a lokaci guda akan rukunin yanar gizo. Kowane kwantena yana amfani da shaguna daban-daban don Kukis, API ɗin Ma'ajiyar Gida, indexedDB, cache, da abun ciki na asali.

  • Ƙara saitin "browser.tabs.allowTabDetach" zuwa game da: config don hana a cire shafuka cikin sababbin windows. Tsare-tsare shafin na haɗari yana ɗaya daga cikin bugu na Firefox masu ban haushi waɗanda ke buƙatar gyarawa. nema shekaru 9. Mai binciken yana ba da damar linzamin kwamfuta don jawo shafin zuwa sabuwar taga, amma a wasu yanayi ana ware shafin zuwa cikin wata taga daban yayin aiki lokacin da linzamin kwamfuta ke motsawa cikin sakaci yayin danna shafin.
  • An Kashe goyon bayan add-ons da aka shigar ta hanyar kewayawa kuma ba a ɗaure su da bayanan bayanan mai amfani ba. Canjin kawai yana shafar shigar da add-ons a cikin kundayen adireshi (/usr/lib/mozilla/extensions/,/usr/share/mozilla/extensions/ ko ~/.mozilla/extensions/) wanda duk yanayin Firefox ke sarrafa shi akan tsarin. ba a haɗa shi da mai amfani ba). Ana amfani da wannan hanyar don shigar da add-ons a cikin rarrabawa, don sauyawa mara izini tare da aikace-aikacen ɓangare na uku, don haɗa add-ons masu ɓarna, ko don isar da ƙari tare da mai sakawa daban. A cikin Firefox 73, add-ons da aka shigar da karfi a baya an motsa su ta atomatik daga kundin adireshi zuwa bayanan bayanan mai amfani guda ɗaya kuma yanzu ana iya zama. cire ta hanyar mai sarrafa ƙara na yau da kullun.
  • A cikin tsarin ƙarawa na Lockwise wanda aka haɗa a cikin burauzar, wanda ke ba da damar “game da: shiga” don sarrafa amintattun kalmomin shiga, goyon baya jera a jujjuya tsari (Z zuwa A).
  • WebRTC ya ƙara kariya daga ɗigon bayanai game da adireshin IP na ciki yayin kiran murya da bidiyo ta amfani da "mDNS ICE", ɓoye adireshin gida a bayan mai gano bazuwar da aka ƙirƙira ta hanyar Multicast DNS.
  • Canza wurin sauya yanayin hoto-cikin-hoto wanda ya mamaye maɓallin hoto na gaba a cikin tsarin shigar da hoto na batch akan Instagram.
  • A cikin JavaScript ya kara da cewa ma'aikacin "?.", ƙirƙira don bincika lokaci guda na jerin kaddarorin ko kira. Misali, ta hanyar tantance "db?.user?.name?. tsawon" yanzu zaku iya samun damar darajar "db.user.name.length" ba tare da wani bincike na farko ba. Idan an sarrafa kowane abu a matsayin mara amfani ko ba a bayyana shi ba, fitarwar za ta zama “ba a bayyana ba”.
  • An Kashe goyan baya akan gidajen yanar gizo da kuma a cikin add-ons don hanyar Object.toSource() da rashin aiki na duniya ().
  • An ƙara sabon taron canjin harshe_ko da da dukiyar da ke da alaƙa canjin harshe, wanda ke ba ka damar kiran mai kulawa lokacin da mai amfani ya canza yaren mu'amala.
  • An kunna sarrafa taken HTTP Tsare-tsare-Asali-Manufar Albarkatu (CORP.), ƙyale shafukan yanar gizo don hana shigar da albarkatu (misali, hotuna da rubutun) da aka ɗora daga wasu yankuna ( asali da kuma giciye). Mai taken na iya ɗaukar dabi'u biyu: "asalin ɗaya" (yana ba da izinin buƙatun albarkatu tare da makirci ɗaya kawai, sunan mai masauki da lambar tashar jiragen ruwa) da "site-site" (yana ba da izinin buƙatun daga rukunin yanar gizo kawai).

    Tsare-tsare-Asali-Manufa- Albarkatun-Tsarin: site-guda

  • An kunna taken HTTP ta tsohuwa Siffar-Manufa, wanda ke ba ku damar sarrafa halayen API kuma kunna wasu fasalulluka (misali, zaku iya musaki damar zuwa API Gelocation, kamara, makirufo, cikakken allo, autoplay, rufaffen-kafofin watsa labarai, rayarwa, API Biyan kuɗi, yanayin neman XMLHttp na aiki tare, da sauransu). Don tubalan iframe, sifa "damar", wanda za a iya amfani da shi a cikin lambar shafi don ba da haƙƙoƙin wasu tubalan iframe.

    Siffar-Manufa: makirufo 'babu'; geolocation 'babu'

    Idan rukunin yanar gizon ya ba da izini, ta hanyar sifa "ba da izini", yin aiki tare da albarkatu don takamaiman iframe, kuma an karɓi buƙatun daga iframe don samun izini don yin aiki tare da wannan albarkatun, mai binciken yanzu yana nuna maganganu don ba da izini a cikin mahallin babban shafi kuma yana ba da haƙƙoƙin da mai amfani ya tabbatar ga iframe (maimakon wani takamaiman tabbaci na iframe da babban shafi). Amma, idan babban shafin ba shi da izini ga albarkatun da aka nema ta hanyar sifa mai ba da izini, iframe yana samun damar shiga albarkatun nan da nan. an katange, ba tare da nuna maganganu ga mai amfani ba.

  • An kunna tallafin kadarorin CSS ta tsohuwa'rubutu-jakado-matsayi', wanda ke ƙayyade matsayi na rubutun rubutu (misali, lokacin da aka nuna rubutu a tsaye, za ka iya tsara layi a hagu ko dama, kuma lokacin nunawa a kwance, ba kawai daga ƙasa ba, har ma daga sama). Bugu da ƙari a cikin kaddarorin CSS waɗanda ke sarrafa salon layi rubutu-karkashin layi-offset и rubutu-adon-kauri Ƙara goyon baya don amfani da ƙimar kashi.
  • A cikin kayan CSS shaci-style, wanda ke bayyana salon layi a kusa da abubuwa, rashin daidaituwa zuwa "auto" (a baya nakasassu saboda matsaloli a cikin GNOME).
  • A cikin JavaScript debugger kara da cewa ikon gyara ma'aikatan gidan yanar gizon da aka kafa, wanda za'a iya dakatar da aiwatar da shi da kuma cire shi mataki-mataki ta amfani da wuraren karya.

    Firefox 74 saki

  • Binciken binciken shafin yanar gizon yanzu yana ba da gargaɗi ga kaddarorin CSS waɗanda suka dogara da z-index, sama, hagu, ƙasa, da abubuwa masu matsayi dama.
    Firefox 74 saki

  • Don Windows da macOS, an aiwatar da ikon shigo da bayanan martaba daga mai binciken Microsoft Edge dangane da injin Chromium.

Baya ga sabbin abubuwa da gyaran kwaro, Firefox 74 ta gyara 20 rauni, wanda 10 (an tattara a ƙarƙashin CVE-2020-6814 и CVE-2020-6815) an yi musu alama a matsayin mai yuwuwar haifar da kisa ga masu hari lokacin buɗe shafuka na musamman. Bari mu tunatar da ku cewa matsalolin ƙwaƙwalwar ajiya, kamar buffer malalewa da samun dama ga wuraren ƙwaƙwalwar ajiya da aka riga aka warware, kwanan nan an yi musu alama a matsayin haɗari, amma ba mahimmanci ba.

source: budenet.ru

Add a comment