Google tau tshaj tawm qhov kev tso tawm ntawm Chrome 118 lub vev xaib browser, tib lub sijhawm, kev tso tawm ruaj khov ntawm Chromium qhov project pub dawb, uas yog lub hauv paus ntawm Chrome, muaj. Chrome browser txawv ntawm Chromium hauv kev siv Google logos, muaj ib qho system xa cov ntawv ceeb toom thaum muaj kev sib tsoo, modules rau kev ua si cov ntsiab lus tiv thaiv cov yeeb yaj kiab (DRM), lub kaw lus rau kev txhim kho qhov hloov tshiab, ua kom muaj kev sib cais ntawm Sandbox mus tas li. , muab cov yuam sij rau Google API thiab xa RLZ- thaum tshawb nrhiav. Rau cov neeg uas xav tau sijhawm ntxiv los hloov kho, Lub Koom Haum Extended Stable yog cais kev txhawb nqa, ua raws li 8 lub lis piam. Qhov kev tso tawm tom ntej ntawm Chrome 119 yog teem rau Lub Kaum Hli 31st.
Cov kev hloov loj hauv Chrome 118:
- Kev npaj tau pib rau Chrome kom tsis txhob txhawb nqa cov ncuav qab zib thib peb uas tau teeb tsa thaum nkag mus rau lwm qhov chaw uas tsis yog lub npe ntawm nplooj ntawv tam sim no. Cov ncuav qab zib zoo li no yog siv los taug qab cov neeg siv kev txav ntawm cov chaw hauv cov cai ntawm kev tshaj tawm xov xwm, social network widgets thiab web analytics systems. Cov kev hloov pauv tau raug thawb los ntawm Privacy Sandbox txoj kev pib, uas yog lub hom phiaj los tawm tsam kev sib haum xeeb ntawm cov neeg siv kev xav tau kev ceev ntiag tug thiab kev xav ntawm kev tshaj tawm xov xwm thiab cov chaw los taug qab cov neeg tuaj saib nyiam.
Hauv Chrome 118, Web Developer Tools tam sim no muab lus ceeb toom thaum xa cov ncuav qab zib uas yuav raug thaiv yav tom ntej. Kuj tseem ntxiv cov kab lus hais kom ua "-test-third-party-cookie-phaseout" thiab qhov chaw "chrome://flags/#test-third-party-cookie-phaseout" kom yuam kev thaiv kom qhib rau kev sim. Qhov tseeb thaiv cov ncuav qab zib thib peb yuav pib hauv thawj peb lub hlis twg ntawm 2024 thiab tsuas yog cuam tshuam rau 1% ntawm Chrome cov neeg siv hauv lub sijhawm sim mus txog rau lub quarter thib peb. Tom qab lub quarter thib peb ntawm xyoo 2024, qhov thaiv kev tiv thaiv yuav raug nce mus rau 100%.
Es tsis txhob taug qab cov ncuav qab zib, nws tau thov kom siv cov APIs hauv qab no:
- FedCM (Federated Credential Management) tso cai rau koj los tsim cov kev pabcuam tus kheej uas ua kom muaj kev ceev ntiag tug thiab ua haujlwm yam tsis muaj cov ncuav qab zib thib peb.
- Private State Tokens tso cai rau koj cais cov neeg siv sib txawv yam tsis tas siv cov cim sib txawv thiab hloov cov ntaub ntawv tseeb ntawm cov neeg siv sib txawv ntawm cov ntsiab lus sib txawv.
- Cov ntsiab lus (kev thuam) muab lub peev xwm los txheeb xyuas pawg ntawm cov neeg siv kev txaus siab uas tuaj yeem siv los txheeb xyuas cov pab pawg ntawm cov neeg siv uas muaj kev txaus siab zoo sib xws yam tsis tau txheeb xyuas cov neeg siv khoom siv taug qab cov ncuav qab zib. Cov kev txaus siab raug xam raws li tus neeg siv cov kev ua browsing thiab khaws cia rau ntawm tus neeg siv lub cuab yeej. Siv cov Topics API, ib lub network tshaj tawm tuaj yeem tau txais cov ntaub ntawv dav dav txog kev txaus siab ntawm tus kheej yam tsis tas yuav paub txog cov haujlwm tshwj xeeb.
- Kev Tiv Thaiv Cov Neeg Tuaj Saib Xyuas, daws teeb meem ntawm retargeting thiab ntsuam xyuas koj tus kheej cov neeg tuaj saib (ua haujlwm nrog cov neeg siv uas twb tau mus xyuas lub xaib ua ntej).
- Kev Tshaj Tawm Txog Kev Tshaj Tawm tso cai rau koj los soj ntsuam cov yam ntxwv ntawm kev tshaj tawm zoo li kev hloov pauv thiab hloov pauv (yuav khoom ntawm qhov chaw tom qab kev hloov pauv).
- Lub Chaw Nkag Nkag API tuaj yeem siv los thov tus neeg siv kev tso cai nkag mus rau lub ncuav qab zib cia yog tias cov ncuav qab zib thib peb raug txwv los ntawm lub neej ntawd.
- Kev them nyiaj yug rau ECH (Encrypted Client Nyob Zoo) mechanism yog qhib rau txhua tus neeg siv, uas txuas ntxiv kev txhim kho ntawm ESNI (Encrypted Server Name Indication) thiab siv los encrypt cov ntaub ntawv hais txog TLS kev sib kho tsis, xws li lub npe thov. Qhov sib txawv tseem ceeb ntawm ECH thiab ESNI yog tias es tsis txhob encrypting nyob rau theem ntawm ib tus neeg teb, ECH encrypts tag nrho TLS ClientHello cov lus, uas tso cai rau koj los thaiv cov xau los ntawm cov teb uas ESNI tsis npog, piv txwv li, PSK (Pre-Shared Key) teb. Txhawm rau tswj xyuas seb ECH puas tau qhib, qhov "chrome://flags#encrypted-client-hello" chaw yog muab.
- Thaum koj ua kom muaj kev tiv thaiv browser zoo dua (Safe Browsing> Txhim kho kev tiv thaiv), nws yog tam sim no muaj peev xwm los cuam tshuam qhov tsis zoo add-ons ntsia sab nraum tus txheej txheem add-on catalog. Qhov kev txiav txim siab tshem tawm nws yog ua nyob rau hauv Google servers raws li kev txheeb xyuas phau ntawv lossis tom qab lub kaw lus tsis siv neeg txhawm rau txheeb xyuas cov lej phem tau tshwm sim.
- Thaum kev tiv thaiv browser txheem raug qhib (Kev Tshawb Nrhiav Nyab Xeeb > Kev tiv thaiv txheem), kev kuaj xyuas kev nyab xeeb tiag tiag ntawm cov URL qhib raug siv, raws li kev xa mus rau cov neeg rau zaub mov Google cov hashes ib nrab los ntawm cov URL uas tus neeg siv qhib. Txhawm rau tiv thaiv kev sib phim IP chaw nyob Cov ntaub ntawv tus neeg siv thiab cov ntaub ntawv hash raug xa mus los ntawm ib lub proxy nruab nrab. Yav dhau los, kev kuaj xyuas tau ua los ntawm kev rub tawm ib daim ntawv teev cov URL tsis muaj kev nyab xeeb rau hauv lub system ntawm tus neeg siv. Cov txheej txheem tshiab tso cai rau kev thaiv cov URL phem sai dua.
- Tus qauv tsim ntawm nplooj ntawv nthuav tawm thaum sim qhib lub vev xaib uas pom tias tsis muaj kev nyab xeeb thaum kuaj xyuas los ntawm Safe Browsing mechanism tau txhim kho.
- Telemetry xa mus rau Google servers thaum Enhanced Browsing Protection enabled (Safe Browsing > Enhanced Protection) tam sim no suav nrog hu rau chrome.tabs API add-ons. Cov ntaub ntawv raug sau los txheeb xyuas cov kev ua phem thiab kev ua txhaum cai hauv cov add-ons.
- Thaum koj ua kom muaj kev tiv thaiv browser siab heev (Safe Browsing> Txhim Kho Kev Tiv Thaiv), sib sib zog nqus scan ntawm encrypted ZIP thiab RAR archives tau txais kev txhawb nqa ntawm Google sab (tus neeg siv tau ceeb toom rau tus password unpacking, tom qab uas cov ntsiab lus raug xa mus rau Google servers rau scanning) .
- Cov ntawv tshiab tau muab ntxiv rau Configurator thiab Privacy Guide los piav qhia txog qib kev tiv thaiv Safe Browsing thiab txuas mus rau cov ntawv muaj feem nrog cov ntaub ntawv ntxiv tau ntxiv. Cov lus piav qhia yooj yim ntawm kev tiv thaiv tus qauv, kev tiv thaiv tsis siv neeg, thiab lo lus ceeb toom cuam tshuam tus password.
- Cov ntaub ntawv hais txog qhov muaj cov nyiaj cheb tau ntxiv rau ntu Quests (tus nqi taug qab hauv cov khw hauv online) ntawm nplooj ntawv tshiab. Qhov taw qhia luv nqi kuj tseem tuaj yeem tshwm sim hauv qhov chaw nyob bar thaum qhib nplooj ntawv nrog cov khoom lag luam los ntawm cov khw hauv online uas taug qab los ntawm Google.
- Raws li RFC-6265bis specification, tag nrho cov ncuav qab zib uas muaj cov cim tswj thiab teeb tsa los ntawm JavaScript raug thaiv. Yav dhau los, Cov ncuav qab zib nrog cov cim tsis zoo, cov khoom thauj rov qab, thiab cov kab noj tau raug txiav tawm ntawm tus cwj pwm teeb meem es tsis yog thaiv, uas tuaj yeem siv rau lub hom phiaj phem hauv qee qhov xwm txheej. Txhawm rau lov tes taw tus cwj pwm tshiab, koj tuaj yeem siv qhov "--disable-features=BlockTruncatedCookies" kev xaiv.
- Cov neeg ua haujlwm pabcuam tau sau npe nrog add-ons raug tso cai nkag mus rau WebUSB API.
- Qhov xav tau rau tus neeg siv ua ntej qhib lub peev xwm los tso saib cov lus sib tham rau kev thov thiab lees paub cov nyiaj tau raug tshem tawm.
- Tso tseg kev txiav txim siab tus sawv cev ntawm ASCII cov cim ua "%xx" cov lej. Piv txwv li, yav dhau los "http://example.com/%41" tau txiav txim siab rau "http://example.com/A" ua ntej sau rau url.href, tab sis tam sim no nws yuav nyob twj ywm "http://example. com/%41""
- Ntxiv lub peev xwm los tso cov ntawv vertically hauv web daim ntawv xaiv xaiv, ntsuas, kev vam meej, khawm, textarea thiab cov tswv yim. Qhov chaw ntawm cov ntawv hauv cov ntaub ntawv tau teeb tsa siv CSS cov cuab yeej sau-hom, uas tuaj yeem nqa cov txiaj ntsig ntsug-rl lossis ntsug-lr rau cov zaub ntsug.
- Cov cuab yeej "tso" CSS tsis txhawb cov ntsiab lus tsis yog qauv: puab-spin-khawm, media-slider, media-sliderthumb, media-volume-slider, media-volume-sliderthumb, push-button, searchfield-tso tseg-khawm, slider-horizontal, sliderthumb-horizontal, sliderthumb-verttical thiab square-khawm. Txhawm rau ntsuas qhov kev thov rau cov lus tseem ceeb no uas tsis suav nrog hauv qhov tshwj xeeb, kev txheeb cais tau sau tseg, raws li lawv tau siv tsuas yog hauv 0.001% ntawm cov xwm txheej.
- Ntxiv @scope CSS txoj cai, uas khi CSS styles coj mus rau hauv tus account qhov sib thooj ntawm style txhais rau cov ntsiab lus. Txoj cai @scope tuaj yeem siv los hla cov qauv zoo nkauj raws li qhov kev txiav txim ntawm cov ntsiab lus, lossis los kho cov qauv ntawm cov khoom tsis cuam tshuam rau cov qauv ntawm nws cov ntsiab lus zes. Piv txwv li, rau nested divs: Kuv yog xim liab! Txawv liab! tag nrho cov ntsiab lus yuav yog xim liab lub teeb liab vim cov nyhuv ntawm "lightpink-ntsuab" style teev nyob rau hauv niam txiv div ntawm tag nrho cov block. Siv @scope koj tuaj yeem hloov qhov Scope thiab yuam cov nested div kom styled "pink-theme" raws li qhov sib thooj ntawm style txhais, es tsis yog qhov kev txiav txim ntawm lub ntsiab lus hauv code: @scope (.pink-theme) { ib {xim: hotpink; } } @scope (.lightpink- ntsiab lus){ ib { xim: lightpink; }}
- Ntxiv kev txhawb nqa rau cov lus nug xov xwm (@media) "scripting", uas tso cai rau koj los txheeb xyuas qhov muaj peev xwm los ua cov ntawv sau (piv txwv li, hauv CSS koj tuaj yeem txiav txim siab seb puas muaj kev txhawb nqa JavaScript).
- Ntxiv kev txhawb nqa rau qhov nyiam-txo-pob tshab xov xwm query, uas ua rau nws muaj peev xwm txiav txim siab qhov kev hloov pauv hauv cov txheej txheem teeb tsa lub luag haujlwm rau kev txo qis kev siv cov pob tshab lossis cov txiaj ntsig translucency (piv txwv li, "Txo pob tshab" hom hauv macOS, siv los nce. lub readability ntawm cov ntawv).
- Ntxiv kev txhawb nqa rau cov txiaj ntsig tshiab "float: inline-start", "float: inline-end", "clear: inline-start", "clear: inline-end", "resize: block", "resize: inline" nyob rau hauv CSS. tswj cov ntsiab lus ntawm lub ntsiab lus (los txhawb cov lus uas tsis tau sau los ntawm sab saum toj mus rau hauv qab thiab sab laug mus rau sab xis, lub ntsiab lus ntawm qhov chaw siv lub ntsiab lus pib, kawg, thiab kev taw qhia ntawm cov ntawv nyeem).
- Cov cuab yeej "transform-box" CSS tam sim no txhawb nqa stroke-box, cov ntsiab lus-box, thiab ciam teb-box qhov tseem ceeb, tso cai rau koj los hloov txoj hauv kev los xam qhov chaw siv rau kev hloov pauv, piv txwv li, siv cov duab nraaj siab heev.
- Ntxiv lub peev xwm los teeb tsa kev tsom mus rau scrolling blocks thaum navigating siv cov keyboard (piv txwv li, tsom mus rau scrolling tuaj yeem teeb tsa los ntawm nias lub tab tab thiab scrolling nrog tus cursor yuam sij).
- Kev txhim kho tau ua rau cov cuab yeej rau cov neeg tsim tawm lub vev xaib. Lub peev xwm ntawm Cov Chaw Pabcuam tau nthuav dav, nyob rau hauv uas, tsis yog "Cov Ntaub Ntawv" ntu, "Chaw Ua Haujlwm" tab yog muab, los ntawm qhov koj tuaj yeem synchronize cov kev hloov pauv ntxiv los ntawm cov cuab yeej tsim tawm nrog cov ntaub ntawv.
Nws muaj peev xwm hloov qhov kev txiav txim ntawm tabs nyob rau hauv qhov chaw vaj huam sib luag los ntawm kev txav lawv nrog tus nas nyob rau hauv drag&poob hom. Xyuas kom formatting ntawm JavaScript code embedded nyob rau hauv cov ntawv sau nrog hom module, importmap thiab speculationrules. Ntxiv syntax highlighting rau scripts nrog importmap thiab speculationrules hom.
Hauv cov khoom vaj huam sib luag, nyob rau hauv Styles tab, ib ntu cais tau ntxiv rau cov cuab yeej kev cai, tso cai rau koj los txhais koj tus kheej CSS cov khoom yam tsis tau khiav JavaScript. Cov txiaj ntsig tshawb nrhiav tam sim no tso tawm tag nrho cov kev sib tw hauv ib txoj hlua, tsis yog thawj qhov sib tw, uas yog qhov tseem ceeb thaum tshawb nrhiav cov ntaub ntawv JavaScript uas tau ntim kom txo qhov loj me (nias ntawm qhov tshwm sim qhib cov ntaub ntawv hauv tus editor thiab scrolls vertically thiab horizontally los qhia txoj hauj lwm pom).
Ntxiv nrog rau kev tsim kho tshiab thiab kho kab laum, tus tshiab version tshem tawm 20 qhov tsis zoo. Ntau qhov tsis zoo tau raug txheeb xyuas raws li qhov tshwm sim ntawm kev ntsuas tsis siv neeg siv qhov chaw nyob Sanitizer, MemorySanitizer, Tswj Flow Integrity, LibFuzzer thiab AFL cov cuab yeej. Ntawm lwm yam, qhov kev tso tawm tshiab tshem tawm qhov tsis txaus ntseeg tseem ceeb CVE-2023-5218 cuam tshuam nrog kev nco nkag tom qab tso tawm (Siv tom qab pub dawb) hauv qhov chaw cais tawm. Qhov tsis zoo tso cai rau koj hla txhua theem ntawm kev tiv thaiv browser thiab ua tiav cov cai ntawm lub kaw lus sab nraum lub sandbox ib puag ncig. Raws li ib feem ntawm qhov kev pabcuam nyiaj ntsuab rau kev tshawb pom qhov tsis zoo rau qhov kev tso tawm tam sim no, Google tau them 14 khoom plig muaj nqis txog $ 30,5 txhiab (ib qho $ 6000 khoom plig, ob $ 5000 khoom plig, ob $ 3000 khoom plig, ib qho khoom plig $ 2000, rau $ 1000 khoom plig thiab ib qho khoom plig $ 500). Qhov loj ntawm ib qho khoom plig tseem tsis tau txiav txim siab.
Tau qhov twg los: opennet.ru
