Lub Tsev Haujlwm Dawb Software tau qhia txog JShelter qhov project, uas tsim ib qho browser ntxiv los tiv thaiv kev hem thawj uas tshwm sim thaum siv JavaScript ntawm cov vev xaib, suav nrog kev qhia zais zais, taug qab kev txav thiab khaws cov ntaub ntawv ntawm cov neeg siv. Txoj haujlwm code raug faib raws li daim ntawv tso cai GPLv3. Cov add-on yog npaj rau Firefox, Google Chrome, Opera, Brave, Microsoft Edge thiab lwm yam browsers raws li lub cav Chromium.
Qhov project yog tsim los ua ib qho kev sib koom tes pab nyiaj los ntawm NLnet Foundation. Giorgio Maone, tus tsim ntawm NoScript add-on, nrog rau cov tsim ntawm J ++ project thiab cov kws sau ntawv ntawm JS-Shield thiab JavaScript Restrictor add-ons, kuj tau koom nrog kev txhim kho JShelter. JavaScript Restrictor add-on yog siv los ua lub hauv paus rau txoj haujlwm tshiab.
JShelter tuaj yeem xav tias yog ib hom firewall rau JavaScript programming interfaces muaj rau cov vev xaib thiab web applications. Lub add-on muab plaub theem ntawm kev tiv thaiv, nrog rau kev hloov pauv hloov pauv rau kev nkag mus rau API. Qib xoom tso cai nkag mus rau tag nrho APIs, thawj suav nrog kev thaiv tsawg kawg nkaus uas tsis cuam tshuam rau kev ua haujlwm ntawm nplooj ntawv, qib thib ob sib npaug ntawm kev thaiv thiab kev sib raug zoo, thiab qib plaub suav nrog kev txwv nruj ntawm txhua yam tsis tsim nyog.
API thaiv kev teeb tsa tuaj yeem khi rau ib qho chaw, piv txwv li, kev tiv thaiv tuaj yeem ntxiv dag zog rau qee qhov chaw, thiab cuam tshuam rau lwm tus. Koj tseem tuaj yeem xaiv thaiv qee yam JavaScript, cov khoom, cov khoom, thiab cov haujlwm, lossis hloov cov nqi xa rov qab (piv txwv li, tsim cov ntaub ntawv tsis tseeb txog lub system). Ib qho tshwj xeeb yog NBS (Network boundary shield) hom, uas tsis tso cai rau cov nplooj ntawv siv qhov browser ua tus neeg sawv cev ntawm sab nraud thiab hauv zos tes hauj lwm (tag nrho cov lus thov raug cuam tshuam thiab txheeb xyuas).
Thaiv lossis txwv APIs:
- window.Date, window.performance.now(), window.PerformanceEntry, Event.prototype.timeStamp, Gamepad.prototype.timestamp thiab VRFrameData.prototype.timestamp - lub sij hawm tso tawm tuaj yeem siv los txheeb xyuas thiab ua tawm sab-channel tawm tsam .
- HTMLCanvasElement (canvas.toDataURL(), canvas.toBlob(), CanvasRenderingContext2D.getImageData, OffscreenCanvas.convertToBlob()) - siv los txiav txim cov yam ntxwv ntawm cov duab subsystem thaum txheeb xyuas tus neeg siv.
- AudioBuffer thiab Analystsi (AudioBuffer.getchannelData (), AudioStSncainencatedata (), analysydromholainencydata (), analysylodetomnencyData ()) - Qhia txog kev soj ntsuam ntawm Aud IO cov cim.
- WebGLRenderingContext - kev txheeb xyuas los ntawm kev txheeb xyuas cov yam ntxwv ntawm pawg duab thiab GPU.
- MediaDevices.prototype.enumerateDevices - kev txheeb xyuas los ntawm kev tau txais cov kev txwv thiab cov npe ntawm lub koob yees duab thiab lub microphone.
- navigator.deviceMemory, navigator.hardwareConcurrency - tau txais cov ntaub ntawv hais txog kho vajtse.
- XMLHttpRequest (XHR) - hloov cov ntaub ntawv kaw lus mus rau lwm tus neeg rau zaub mov tom qab nplooj ntawv thauj khoom.
- ArrayBuffer - nqa tawm microarchitectural Spectre tawm tsam.
- WebWorker (window.Worker), SharedArrayBuffer (window.SharedArrayBuffer) - nqa tawm kev tawm tsam uas ntsuas qhov qeeb thaum nkag mus rau cov ntaub ntawv.
- Geolocation API (navigator.geolocation) - nkag mus rau cov ntaub ntawv qhov chaw (qhov sib ntxiv tso cai rau koj los cuam tshuam cov ntaub ntawv xa rov qab).
- Gamepad API (navigator.getGamepads()) yog ib qho ntawm cov cim qhia uas siv rau hauv tus account tias muaj gamepad hauv lub cev.
- Virtual Reality API, Mixed Reality API - siv cov khoom siv virtual kev muaj tiag rau kev txheeb xyuas.
- window.name - cross-site leaks.
- navigator.sendBeacon - siv rau web analytics.
Tau qhov twg los: opennet.ru