An saki mai binciken gidan yanar gizon Kuma Firefox 68.8 don dandamali na Android. Bugu da kari, an samar da sabuntawa tare da dogon lokaci goyon baya . Nan da nan zuwa mataki Reshen Firefox 77 zai canza, wanda aka tsara sakinsa a ranar 2 ga Yuni.
:
- iyawar tsarin ƙara tsarin Lockwise wanda aka haɗa a cikin burauzar, wanda ke ba da tsarin “game da: login” don sarrafa amintattun kalmomin shiga. Ana nuna gargadi yanzu don ajiyayyun asusun da ke da alaƙa da rukunin yanar gizon da a baya suka fuskanci kutse tare da leken asiri. Ana nuna gargadi idan ba a sabunta shigarwar kalmar sirri a Firefox ba tun lokacin da aka lalata shafin.
Har ila yau, an ƙara gargadin cewa an lalata kalmomin sirri da aka yi amfani da su akan shafuka da yawa. Idan ɗaya daga cikin asusun da aka adana yana da hannu a cikin ɓarnar bayanan sirri kuma mai amfani ya sake yin amfani da kalmar sirri iri ɗaya akan wasu rukunin yanar gizon, za a ba shi shawarar ya canza kalmar sirri. Ana aiwatar da tabbaci ta hanyar haɗin kai tare da bayanan aikin , wanda ya hada da bayanai game da asusu biliyan 9.5 da aka sace sakamakon kutse na shafuka 443. Hanya ba a san sunansa ba kuma ya dogara ne akan watsa prefix ɗin hash na SHA-1 daga imel (ƙaɗan haruffan farko), a cikin martanin sabar ta samar da hashes ɗin wutsiya daidai da buƙatun daga bayanan bayanansa, kuma mai binciken da ke gefensa yana duba su. tare da cikakken hash ɗin da ke akwai kuma, idan akwai wasa, yana ba da gargaɗi (cikakken zanta ba a watsa shi ba).
An faɗaɗa adadin rukunin rukunin yanar gizon da ake amfani da aikin don su kalmomin sirri masu ƙarfi lokacin cike fom ɗin rajista. A baya can, an nuna alamar da ke nuna kalmar sirri mai ƙarfi kawai idan akwai filaye tare da sifa "autocomplete = sabon kalmar sirri". Ko da wane rukunin yanar gizon da aka yi amfani da shi, ana iya samar da kalmar wucewa ta menu na mahallin.
A kan Windows da macOS, idan Firefox ba ta da babban kalmar sirri, tallafi don nuna maganganun tantancewar OS da shigar da bayanan tsarin kafin duba kalmomin shiga da aka adana. Bayan shigar da kalmar sirri ta tsarin, ana ba da damar yin amfani da kalmomin shiga da aka adana na mintuna 5, bayan haka kalmar sirri za ta buƙaci sake shigar da kalmar wucewa. Wannan ma'aunin zai kare bayananka daga idanu masu zazzagewa idan an bar kwamfutar ba tare da kulawa ba idan ba a saita babban kalmar sirri a cikin burauzar ba.
- aiki"", wanda aka kashe ta tsohuwa. Lokacin da aka kunna yanayin ta amfani da ma'aunin "dom.security.https_only_mode" a cikin game da: config, duk buƙatun da aka yi ba tare da ɓoyewa ba za a tura su kai tsaye zuwa amintattun zaɓuɓɓukan shafi ("http://" zuwa "https://"). Ana yin maye gurbin duka a matakin albarkatun da aka ɗora akan shafuka, da kuma lokacin shigar da adireshin adireshin. Idan yunƙurin shiga adireshin da aka shigar a mashigin adireshi ta https ya ƙare a ƙarshen lokaci, za a nuna mai amfani da shafin kuskure tare da maɓalli don yin buƙata ta hanyar http: //. Idan akwai gazawa lokacin lodawa ta hanyar “https://” subsources lode yayin sarrafa shafi, irin wannan gazawar ba za a yi watsi da su ba, amma za a nuna gargaɗi a cikin na'ura mai ba da hanya tsakanin hanyoyin sadarwa, wanda za a iya gani ta hanyar kayan aikin haɓaka gidan yanar gizo.
- An ƙara ikon canzawa da sauri tsakanin kallon bidiyo a cikin "» (Hoto-in-Hoto) da kallon cikakken allo. Mai amfani zai iya rage girman bidiyon zuwa ƙaramar taga kuma a lokaci guda yana yin wasu ayyuka, gami da wasu aikace-aikace da kan kwamfutoci masu kama-da-wane. Idan kana son mayar da hankalinka ga bidiyon, danna sau biyu kawai don zuwa kallon cikakken allo. Danna sau biyu zai dawo da kallo zuwa yanayin hoto-cikin hoto.
- An yi aiki don inganta gani da kuma dacewa da aiki tare da adireshin adireshin. Lokacin buɗe sabon shafin, an rage inuwar kusa da filin bar adireshin. An ɗan faɗaɗa mashigin alamun don ƙara wurin da ake dannawa akan allon taɓawa.
- A cikin mahallin tushen Wayland ta amfani da shi
yuwuwar haɓaka haɓaka kayan aikin VP9 da sauran nau'ikan bidiyo da ke goyan bayan Firefox. Ana ba da hanzari ta amfani da VA-API (Video Acceleration API) da FFmpegDataDecoder (kawai ana aiwatar da tallafin H.264 a cikin sakin da ya gabata). Don sarrafa ko an kunna hanzari, yakamata ku saita sigogi "widget.wayland-dmabuf-webgl.enabled" da "widget.wayland-dmabuf-vaapi.enabled" a cikin game da: config. - A cikin Windows, ga masu amfani da kwamfyutocin kwamfyutoci masu Intel GPU da ƙudurin allo wanda bai wuce 1920x1200 ba, ana kunna tsarin haɗawa ta tsohuwa. , an rubuta a cikin yaren Rust da fitar da abubuwan da ke ba da ayyukan shafi shafi zuwa gefen GPU.
- Ƙara goyon bayan abu , wanda
damar yin amfani da musaya и , yana gudana a waje da babban layin aiwatarwa a Firefox. Sabuwar API ɗin tana ba ku damar aiwatar da sauti a cikin ainihin lokaci, sarrafa sigogin sauti ta tsarin tsari ba tare da gabatar da ƙarin jinkiri ba ko tasiri ga kwanciyar hankali na fitowar sauti. Gabatarwar AudioWorklet ya ba da damar haɗawa zuwa kiran zuƙowa a cikin Firefox ba tare da shigar da add-on daban ba, sannan kuma ya ba da damar aiwatar da hadaddun yanayin sarrafa sauti a cikin mai binciken, kamar sautin sarari don tsarin gaskiya ko wasanni. - In CSS , wanda ke ayyana ƙimar tsarin launi (CSS Color Module Level 4).
- Intl.NumberFormat, Intl.DateTimeFormat, da Intl.RelativeTimeFormat masu ginawa suna ba da damar sarrafa zaɓin "System" da "calendar" ta tsohuwa. Misali: "Intl.NumberFormat('en-US', {lambar tsarin: 'latn'})" ko "Intl.DateTimeFormat('th', { kalanda: 'gregory'})".
- Ana kunna toshe ƙa'idodin da ba a san su ba ta hanyoyi kamar "location.href" ko .
- Lokacin gwada gabatarwar shafuka akan na'urorin hannu ta amfani da Yanayin ƙira mai amsawa a cikin kayan aikin haɓaka gidan yanar gizo, ana samar da kwaikwayi halin na'urar hannu lokacin sarrafa zuƙowa ta danna sau biyu. Aiwatar daidai fassarar meta-viewta tags, wanda ya ba da damar inganta rukunin yanar gizon ku don Firefox don Android ba tare da na'urar hannu ba.
- A cikin dubawa don duba buƙatun cibiyar sadarwa, lokacin da ka danna maɓalli sau biyu a kan madaidaicin shafi, girman ginshiƙi yana daidaitawa ta atomatik zuwa bayanan da aka nuna.
- An ƙara sabon matattarar sarrafawa zuwa mahaɗin binciken WebSocket don nuna firam ɗin sarrafawa. An aiwatar da ikon yin samfoti na saƙonni a cikin tsari , wanda aka ƙara cikin jerin ƙa'idodin da aka tsara ta atomatik, kama da socket.io, SignalR da WAMP.
- Mai warware matsalar JavaScript yanzu yana da ikon yin watsi da fayilolin da ba su da hannu wajen gyara kuskure. Menu na mahallin ''blackbox'' yana ba da zaɓuɓɓuka don ɓoye abun ciki a ciki ko wajen da aka zaɓa a cikin ma'aunin bayanin martaba. Lokacin yin kwafin alamun tari, tabbatar da cewa an sanya cikakken hanyar akan allo, ba kawai sunan fayil ba.
- A cikin na'ura wasan bidiyo na gidan yanar gizo, a cikin yanayin layi mai yawa, yana yiwuwa a ɓoye ɓoyayyun lambobin da suka wuce layi biyar (don faɗaɗa, danna ko'ina cikin yankin tare da lambar da aka nuna).
Baya ga sabbin abubuwa da gyaran kwaro, Firefox 76 ta gyara , wanda 10 (CVE-2020-12387, CVE-2020-12388 da 8 karkashin CVE-2020-12395) an yi musu alama a matsayin mai mahimmanci kuma mai yuwuwar haifar da aiwatar da lambar maharin lokacin buɗe shafuka na musamman. Rashin lahani na CVE-2020-12388 yana ba ku damar fita daga yanayin sandbox a cikin Windows ta hanyar amfani da alamun shiga. Rashin lahani CVE-2020-12387 yana da alaƙa da samun damar yin amfani da toshewar ƙwaƙwalwar ajiya da aka riga aka saki (Amfani-bayan-kyauta) lokacin da Ma'aikacin Yanar Gizo ya ƙare. CVE-2020-12395 batutuwan ƙwaƙwalwa masu tarin yawa kamar buffer ambaliya.
source: budenet.ru