Chrome yanzu zai sami kariya daga kukis na ɓangare na uku da ɓoye ɓoye

Google gabatar Canje-canje masu zuwa ga Chrome da nufin inganta keɓantawa. Sashin farko na canje-canjen ya shafi sarrafa kuki da goyan bayan sifa ta SameSite. Fara tare da fitowar Chrome 76, ana tsammanin a watan Yuli, za a kasance kunnawa Tutar "site-by-default-cookies", wanda, in babu sifa ta SameSite a cikin saitin-Cookie, za ta saita ƙimar "SameSite = Lax", ta iyakance aika kukis don shigarwa daga. Shafukan na uku (amma har yanzu shafuka za su iya soke ƙuntatawa ta hanyar saita ƙimar SameSite=Babu yayin saita Kuki).

Kasancewa SameSite yana ba ku damar ayyana yanayin da ya halatta a aika kuki lokacin da aka karɓi buƙatu daga rukunin ɓangare na uku. A halin yanzu, mai binciken yana aika kuki ga duk wani buƙatun zuwa shafin da aka saita kuki don shi, koda kuwa an buɗe wani shafin da farko, kuma ana buƙatar buƙatar ta a fakaice ta hanyar loda hoto ko ta hanyar iframe. Cibiyoyin talla suna amfani da wannan fasalin don bin diddigin motsin mai amfani tsakanin shafuka, da
maharan ga kungiyar hare-haren CSRF (lokacin da aka buɗe albarkatun da maharin ke sarrafa, ana aika buƙatu a ɓoye daga shafukansa zuwa wani rukunin yanar gizon da aka tabbatar da mai amfani na yanzu, kuma mai binciken mai amfani yana saita Kukis don irin wannan buƙatar). A gefe guda, ana amfani da ikon aika Kukis zuwa rukunin yanar gizo na ɓangare na uku don saka widget din cikin shafuka, misali, don haɗawa da YuoTube ko Facebook.

Yin amfani da sifa ta SameSit, zaku iya sarrafa halayen Kuki kuma ku ba da izinin aika Kukis kawai don amsa buƙatun da aka ƙaddamar daga rukunin yanar gizon da aka samo kuki ɗin asali. SameSite na iya ɗaukar dabi'u uku "Maƙasudi", "Lax" da "Babu". A cikin yanayin 'Tsarin', ba a aika kukis don kowane irin buƙatun rukunin yanar gizo, gami da duk hanyoyin haɗin yanar gizo masu shigowa daga shafukan waje. A cikin yanayin 'Lax', ana amfani da ƙarin ƙuntatawa na annashuwa kuma ana toshe watsa kuki don buƙatun rukunin yanar gizo kawai, kamar buƙatun hoto ko loda abun ciki ta hanyar iframe. Bambanci tsakanin "Tsarin" da "Lax" ya zo ne don toshe Kukis yayin bin hanyar haɗi.

Daga cikin wasu canje-canje masu zuwa, ana kuma shirin yin amfani da ƙaƙƙarfan ƙuntatawa wanda ke haramta sarrafa Kukis na ɓangare na uku don buƙatun ba tare da HTTPS ba (tare da SameSite=Babu sifa, Ana iya saita kukis a Yanayin Amintacce kawai). Bugu da kari, an shirya gudanar da aikin kare kariya daga amfani da boye-boye (“binciken yatsa” browser), gami da hanyoyin samar da na’urorin gano bayanan da suka shafi kai tsaye, kamar su. ƙudurin allo, jerin nau'ikan MIME masu goyan baya, takamaiman sigogi a cikin rubutun kai (HTTP / 2 и HTTPS), nazarin shigar plugins da fonts, samuwan wasu APIs na Yanar Gizo, musamman ga katunan bidiyo fasali yin amfani da WebGL da Canvas, magudi tare da CSS, nazarin fasali na aiki tare da linzamin kwamfuta и keyboard.

Hakanan a cikin Chrome za a kara kariya daga cin zarafi mai alaƙa da wahalar komawa shafin asali bayan ƙaura zuwa wani rukunin yanar gizo. Muna magana ne game da al'adar daɗaɗa tarihin kewayawa tare da jerin turawa ta atomatik ko ƙara bayanan ƙira zuwa tarihin bincike (ta hanyar pushState), wanda sakamakon haka mai amfani ba zai iya amfani da maɓallin "Back" don komawa zuwa shafin yanar gizon ba. shafi na asali bayan canji na bazata ko turawa tilas zuwa rukunin masu zamba ko masu sabo. Don karewa daga irin wannan magudi, Chrome a cikin mai sarrafa maballin Baya zai tsallake bayanan da ke da alaƙa da turawa ta atomatik da sarrafa tarihin binciken, yana barin shafukan da aka buɗe kawai saboda ayyukan mai amfani.

source: budenet.ru