Google tau nthuav tawm qhov kev tso tawm ntawm Chrome 102 lub vev xaib browser, tib lub sijhawm, kev tso tawm ruaj khov ntawm qhov haujlwm Chromium dawb, uas yog lub hauv paus ntawm Chrome, muaj. Chrome browser txawv ntawm Chromium hauv kev siv Google logos, muaj ib qho system xa cov ntawv ceeb toom thaum muaj kev sib tsoo, modules rau kev ua si cov ntsiab lus tiv thaiv cov yeeb yaj kiab (DRM), lub kaw lus rau kev txhim kho qhov hloov tshiab, ua kom muaj kev sib cais ntawm Sandbox mus tas li. , muab cov yuam sij rau Google API thiab xa RLZ- thaum tshawb nrhiav. Rau cov neeg uas xav tau sijhawm ntxiv los hloov kho, Lub Koom Haum Extended Stable yog cais kev txhawb nqa, ua raws li 8 lub lis piam. Qhov kev tso tawm tom ntej ntawm Chrome 103 yog teem rau Lub Rau Hli 21st.
Cov kev hloov loj hauv Chrome 102:
- Txhawm rau thaiv qhov kev siv ntawm qhov tsis zoo tshwm sim los ntawm kev nkag mus rau lub cim xeeb uas twb tau tso tseg lawm (siv-tom qab-dawb), tsis yog cov taw qhia zoo tib yam, MiraclePtr (raw_ptr) hom pib siv. MiraclePtr muab kev khi rau cov taw qhia uas ua cov kev kuaj xyuas ntxiv ntawm kev nkag mus rau thaj chaw nco thiab teeb meem yog tias pom tias muaj kev nkag mus. Qhov cuam tshuam ntawm txoj kev tiv thaiv tshiab ntawm kev ua tau zoo thiab kev siv nco tau raug ntsuas raws li qhov tsis txaus ntseeg. MiraclePtr mechanism tsis muaj feem xyuam rau txhua qhov txheej txheem, tshwj xeeb nws tsis yog siv los ua cov txheej txheem, tab sis nws tuaj yeem txhim kho kev ruaj ntseg zoo. Piv txwv li, nyob rau hauv qhov kev tso tawm tam sim no, tawm ntawm 32 qhov tsis zoo tau kho, 12 tau tshwm sim los ntawm kev siv-tom qab-dawb teeb meem.
- Tus tsim ntawm lub interface nrog cov ntaub ntawv hais txog kev rub tawm tau hloov pauv. Es tsis txhob ntawm cov kab hauv qab nrog cov ntaub ntawv ntawm kev nce qib, qhov taw qhia tshiab tau ntxiv rau lub vaj huam sib luag nrog rau qhov chaw nyob bar; thaum koj nyem rau ntawm nws, kev nce qib ntawm rub tawm cov ntaub ntawv thiab keeb kwm nrog cov npe ntawm cov ntaub ntawv uas twb tau rub tawm lawm. Tsis zoo li lub vaj huam sib luag hauv qab, lub pob yog tas li pom ntawm lub vaj huam sib luag thiab tso cai rau koj nkag mus sai sai rau koj cov keeb kwm download. Lub interface tshiab tam sim no muab los ntawm lub neej ntawd tsuas yog rau qee tus neeg siv thiab yuav txuas ntxiv mus rau txhua tus yog tias tsis muaj teeb meem. Txhawm rau rov qab cov qub interface lossis qhib qhov tshiab, qhov "chrome://flags#download-bubble" yog muab.
- Thaum tshawb nrhiav cov duab los ntawm cov ntawv qhia zaub mov ("Nrhiav duab nrog Google Lens" lossis "Nrhiav ntawm Google Lens"), cov txiaj ntsig tau pom tam sim no tsis nyob ntawm nplooj ntawv cais, tab sis nyob rau hauv ib sab ntawm cov ntsiab lus ntawm nplooj ntawv thawj (hauv ib lub qhov rais koj tuaj yeem pom ob qho tib si nplooj ntawv cov ntsiab lus thiab thiab qhov tshwm sim ntawm kev nkag mus rau lub tshuab tshawb nrhiav).
- Hauv seem "Privacy and Security" ntawm qhov chaw, ntu "Privacy Guide" tau ntxiv, uas muaj cov ntsiab lus dav dav ntawm cov chaw tseem ceeb uas cuam tshuam txog kev ceev ntiag tug nrog cov lus piav qhia ntxaws txog qhov cuam tshuam ntawm txhua qhov chaw. Piv txwv li, hauv ntu koj tuaj yeem txhais txoj cai xa cov ntaub ntawv mus rau Google cov kev pabcuam, tswj synchronization, ua ncuav qab zib thiab khaws keeb kwm. Kev ua haujlwm tau muab rau qee tus neeg siv; txhawm rau qhib nws, koj tuaj yeem siv qhov "chrome: // chij # kev ceev ntiag tug-qhia" teeb tsa.
- Kev tsim qauv ntawm kev tshawb nrhiav keeb kwm thiab nplooj ntawv saib yog muab. Thaum koj sim rov tshawb nrhiav dua, ib qho lus qhia "Resume your journey" yog tshwm rau hauv qhov chaw nyob bar, tso cai rau koj mus txuas ntxiv kev tshawb fawb los ntawm qhov chaw uas nws tau cuam tshuam lub sij hawm dhau los.
- Chrome Web Store muaj nplooj ntawv "Extensions Starter Kit" nrog kev xaiv thawj zaug ntawm cov kev pom zoo add-ons.
- Hauv kev sim hom, xa daim ntawv thov kev tso cai CORS (Cross-Origin Resource Sharing) mus rau lub vev xaib tseem ceeb nrog lub header "Access-Control-Request-Private-Network: tseeb" tau qhib thaum nplooj ntawv nkag mus rau cov peev txheej hauv lub network sab hauv ( 192.168.xx, 10.xxx, 172.16.xx) lossis rau localhost (128.xxx). Thaum lees paub qhov kev ua haujlwm hauv kev teb rau qhov kev thov no, tus neeg rau zaub mov yuav tsum rov qab "Access-Control-Allow-Private-Network: true" header. Hauv Chrome version 102, qhov kev lees paub tseem tsis tau cuam tshuam rau kev ua tiav ntawm qhov kev thov - yog tias tsis muaj kev lees paub, ceeb toom tau tshwm sim hauv lub vev xaib console, tab sis qhov kev thov subresource nws tus kheej tsis raug thaiv. Enabling thaiv thaum tsis muaj kev pom zoo los ntawm tus neeg rau zaub mov tsis xav kom txog thaum tso tawm ntawm Chrome 105. Txhawm rau kom thaiv kev thaiv hauv kev tshaj tawm ua ntej, koj tuaj yeem ua kom qhov chaw "chrome://flags/#private-network-access-respect-preflight- tau".
Kev pov thawj ntawm txoj cai los ntawm tus neeg rau zaub mov tau qhia los txhawb kev tiv thaiv kev tawm tsam cuam tshuam txog kev nkag mus rau cov peev txheej hauv lub network lossis ntawm tus neeg siv lub computer (localhost) los ntawm cov ntawv sau thaum qhib lub xaib. Cov kev thov no yog siv los ntawm cov neeg tawm tsam los ua CSRF kev tawm tsam ntawm routers, nkag mus rau cov ntsiab lus, cov tshuab luam ntawv, cov neeg siv web interfaces thiab lwm yam khoom siv thiab cov kev pabcuam uas lees txais kev thov los ntawm lub network hauv zos nkaus xwb. Txhawm rau tiv thaiv cov kev tawm tsam zoo li no, yog tias muaj cov peev txheej hauv qab nkag mus rau hauv lub network sab hauv, tus browser yuav xa daim ntawv thov kom tso cai rau thauj cov khoom siv no.
- Thaum qhib cov kev sib txuas hauv hom incognito los ntawm cov ntawv qhia zaub mov, qee qhov kev txwv uas cuam tshuam rau kev ceev ntiag tug raug tshem tawm ntawm URL.
- Qhov hloov tshiab xa tawm tswv yim rau Windows thiab Android tau hloov pauv. Txhawm rau kom sib piv tus cwj pwm ntawm cov ntawv tshiab thiab qub, ntau qhov kev tsim kho tshiab tam sim no tau tsim rau rub tawm.
- Network segmentation thev naus laus zis tau ruaj khov los tiv thaiv cov txheej txheem ntawm kev taug qab cov neeg siv txav ntawm cov chaw raws li khaws cia cov cim qhia hauv thaj chaw uas tsis yog npaj rau kev khaws ntaub ntawv mus tas li ("Supercookies"). Vim tias cov peev txheej cached tau muab khaws cia rau hauv ib qho chaw npe, tsis hais lub hauv paus pib, ib lub vev xaib tuaj yeem txiav txim siab tias lwm qhov chaw thauj khoom los ntawm kev txheeb xyuas seb cov peev txheej ntawd puas nyob hauv cache. Kev tiv thaiv yog raws li kev siv network segmentation (Network Partitioning), qhov tseem ceeb ntawm uas yog ntxiv rau kev sib koom caches ntxiv kev khi cov ntaub ntawv rau lub npe los ntawm cov nplooj ntawv tseem ceeb tau qhib, uas txwv cov kev pab cuam cache rau kev taug qab cov ntawv nkaus xwb mus rau qhov chaw tam sim no (ib tsab ntawv los ntawm iframe yuav tsis tuaj yeem kuaj xyuas seb cov peev txheej tau rub tawm los ntawm lwm qhov chaw). Kev sib koom hauv xeev suav nrog kev sib txuas hauv network (HTTP/1, HTTP/2, HTTP/3, websocket), DNS cache, ALPN/HTTP2, TLS/HTTP3 cov ntaub ntawv, teeb tsa, rub tawm, thiab Cov ntaub ntawv xav tau-CT header.
- Rau kev teeb tsa lub vev xaib ib leeg (PWA, Progressive Web App), nws tuaj yeem hloov kho qhov tsim ntawm thaj chaw lub npe lub qhov rais siv lub qhov rais Controls Overlay Cheebtsam, uas txuas ntxiv thaj tsam ntawm lub vev xaib thov mus rau tag nrho lub qhov rais. Ib daim ntawv thov lub vev xaib tuaj yeem tswj hwm qhov kev ua haujlwm thiab kev tawm tswv yim ntawm tag nrho lub qhov rais, tshwj tsis yog cov txheej txheem overlay nrog cov txheej txheem qhov rai tswj cov nyees khawm (kaw, txo qis, ua kom pom tseeb), kom muab lub vev xaib daim ntawv thov qhov zoo li ntawm daim ntawv thov desktop tsis tu ncua.
- Hauv daim ntawv autofill system, kev txhawb nqa tau ntxiv rau kev tsim cov lej credit card virtual hauv cov teb nrog cov ntsiab lus them nyiaj rau cov khoom hauv khw hauv online. Siv daim npav virtual, tus lej uas tau tsim rau txhua qhov kev them nyiaj, tso cai rau koj tsis txhob hloov cov ntaub ntawv hais txog daim npav rho nyiaj tiag, tab sis yuav tsum muaj kev pabcuam tsim nyog los ntawm lub txhab nyiaj. Cov yam ntxwv tam sim no tsuas yog muaj rau cov neeg siv nyiaj hauv tuam txhab Asmeskas. Txhawm rau tswj hwm kev suav nrog ntawm kev ua haujlwm, "chrome://flags/#autofill-enable-virtual-card" teeb tsa tau thov.
- Lub "Capture Handle" mechanism yog qhib los ntawm lub neej ntawd, tso cai rau koj hloov cov ntaub ntawv mus rau cov ntawv thov uas ntes video. API ua rau nws muaj peev xwm los teeb tsa kev sib cuam tshuam ntawm cov ntawv thov uas nws cov ntsiab lus raug kaw thiab cov ntawv thov uas ua cov kaw. Piv txwv li, daim ntawv thov kev sib tham hauv video uas yog ntes cov yeeb yaj kiab los tshaj tawm qhov kev nthuav qhia tuaj yeem khaws cov ntaub ntawv hais txog kev tshaj tawm kev tswj hwm thiab muab tso rau hauv lub qhov rais video.
- Kev them nyiaj yug rau cov kev cai speculative yog enabled los ntawm lub neej ntawd, muab hloov tau yooj yim syntax los txiav txim seb cov ntaub ntawv txuas-txog cov ntaub ntawv yuav tsum proactively loaded ua ntej tus neeg siv clicks ntawm qhov txuas.
- Cov txheej txheem rau ntim cov peev txheej rau hauv pob hauv Web Bundle hom tau ruaj khov, tso cai rau kev ua kom muaj txiaj ntsig ntawm kev thauj khoom ntau ntawm cov ntaub ntawv nrog (CSS styles, JavaScript, dluab, iframes). Tsis zoo li cov pob hauv Webpack hom, Web Bundle hom muaj qhov zoo hauv qab no: nws tsis yog lub pob nws tus kheej uas tau khaws cia hauv HTTP cache, tab sis nws cov khoom siv; muab tso ua ke thiab ua tiav ntawm JavaScript pib yam tsis tau tos lub pob kom rub tawm tag nrho; Nws raug tso cai kom suav nrog cov peev txheej ntxiv xws li CSS thiab cov duab, uas hauv webpack yuav tsum tau encoded hauv daim ntawv ntawm JavaScript cov hlua.
- Nws tuaj yeem txhais tau tias daim ntawv thov PWA yog tus tuav ntawm qee yam MIME thiab cov ntaub ntawv txuas ntxiv. Tom qab txiav txim siab txog kev khi los ntawm file_handlers teb hauv qhov tshwm sim, daim ntawv thov yuav tau txais ib qho kev tshwm sim tshwj xeeb thaum tus neeg siv sim qhib cov ntaub ntawv cuam tshuam nrog daim ntawv thov.
- Ntxiv ib qho tshiab inert attribute uas tso cai rau koj kos ib feem ntawm DOM tsob ntoo li "inactive". Rau DOM nodes nyob rau hauv lub xeev no, xaiv cov ntawv nyeem thiab pointer hover handlers yog neeg xiam, i.e. Lub pointer-cov xwm txheej thiab cov neeg siv-xaiv CSS cov khoom yeej ib txwm teem rau 'tsis muaj'. Yog hais tias lub node yuav tsum tau kho, ces nyob rau hauv inert hom nws yuav uneditable.
- Ntxiv rau Navigation API, uas tso cai rau cov ntawv thov web los cuam tshuam cov haujlwm navigation, pib navigation, thiab txheeb xyuas keeb kwm ntawm kev ua nrog daim ntawv thov. API muab lwm txoj hauv kev rau windows.history thiab window.location thaj chaw, optimized rau ib nplooj ntawv web applications.
- Ib tus chij tshiab, "kom txog rau thaum pom", tau raug thov rau "pob ntseg" tus cwj pwm, uas ua rau lub ntsiab lus tshawb nrhiav ntawm nplooj ntawv thiab scrollable los ntawm daim ntawv npog. Piv txwv li, koj tuaj yeem ntxiv cov ntawv zais rau nplooj ntawv, cov ntsiab lus uas yuav pom hauv kev tshawb fawb hauv zos.
- Hauv WebHID API, tsim los rau qib qis nkag mus rau HID cov cuab yeej (Tib neeg cov khoom siv sib txuas, cov keyboards, nas, gamepads, touchpads) thiab kev teeb tsa ua haujlwm yam tsis muaj cov tsav tsheb tshwj xeeb hauv lub kaw lus, cov cuab yeej exclusionFilters tau ntxiv rau qhov thovDevice( ) khoom, uas tso cai rau koj tshem tawm qee yam khoom siv thaum lub browser nthuav tawm cov npe ntawm cov khoom siv muaj. Piv txwv li, koj tuaj yeem tshem tawm cov cuab yeej ID uas muaj teeb meem paub.
- Nws raug txwv tsis pub tso tawm daim foos them nyiaj los ntawm kev hu rau PaymentRequest.show() yam tsis muaj kev txiav txim siab rau tus neeg siv, piv txwv li, nyem rau ntawm lub ntsiab lus cuam tshuam nrog tus tuav.
- Kev them nyiaj yug rau lwm qhov kev siv ntawm SDP (Session Description Protocol) raws tu qauv siv los tsim kom muaj kev sib tham hauv WebRTC tau raug txiav lawm. Chrome muaj ob txoj kev xaiv SDP - koom ua ke nrog lwm tus browsers thiab Chrome tshwj xeeb. Txij no mus, tsuas yog qhov kev xaiv portable yog sab laug.
- Kev txhim kho tau ua rau cov cuab yeej rau cov neeg tsim tawm lub vev xaib. Ntxiv cov nyees khawm rau Styles vaj huam sib luag los simulate kev siv lub ntsiab tsaus nti thiab lub teeb. Kev tiv thaiv ntawm Saib Ua Ntej tab nyob rau hauv hom tshuaj xyuas network tau ntxiv dag zog (daim ntawv thov ntawm Cov Ntsiab Cai Kev Nyab Xeeb tau qhib). Tus debugger siv cov ntawv txiav tawm kom rov ua cov ntsiab lus tawg. Ib qho kev siv ua ntej ntawm "Performance insights" vaj huam sib luag tshiab tau raug npaj, uas tso cai rau koj los txheeb xyuas qhov ua tau zoo ntawm qee qhov haujlwm ntawm nplooj ntawv.
Ntxiv nrog rau kev tsim kho tshiab thiab kho kab laum, tus tshiab version tshem tawm 32 qhov tsis zoo. Ntau qhov tsis zoo tau raug txheeb xyuas raws li qhov tshwm sim ntawm kev ntsuas tsis siv neeg siv qhov chaw nyob Sanitizer, MemorySanitizer, Tswj Flow Integrity, LibFuzzer thiab AFL cov cuab yeej. Ib qho ntawm cov teeb meem (CVE-2022-1853) tau raug xa mus rau theem tseem ceeb ntawm kev txaus ntshai, uas txhais tau hais tias muaj peev xwm hla txhua theem ntawm kev tiv thaiv browser thiab ua tiav cov cai ntawm lub kaw lus sab nraud sandbox ib puag ncig. Cov ntsiab lus ntawm qhov tsis zoo no tseem tsis tau tshaj tawm; nws tsuas yog paub tias nws yog tshwm sim los ntawm kev nkag mus rau lub cim xeeb pub dawb (siv-tom qab-dawb) hauv Indexed DB API kev siv.
Raws li ib feem ntawm qhov kev pab cuam nyiaj ntsuab rau kev tshawb pom qhov tsis zoo rau qhov kev tso tawm tam sim no, Google tau them 24 khoom plig muaj nqis $ 65600 (ib qho $ 10000 khoom plig, ib qho $ 7500 khoom plig, ob $ 7000 khoom plig, peb $ 5000 khoom plig, plaub $ 3000 khoom plig, ob $ 2000 khoom plig, ob $ 1000. $500 lawm). Qhov loj ntawm 7 khoom plig tseem tsis tau txiav txim siab.
Tau qhov twg los: opennet.ru