Chrome Tso Tawm 79

Google редставила web browser tso tawm Chrome 79... Ib txhij muaj ruaj khov tso tawm qhov project dawb chromium, uas yog lub hauv paus ntawm Chrome. Chrome browser txawv Kev siv Google logos, muaj lub kaw lus xa cov ntawv ceeb toom thaum muaj kev sib tsoo, muaj peev xwm rub tawm Flash module ntawm kev thov, modules rau kev ua si tiv thaiv cov ntsiab lus video (DRM), lub kaw lus rau kev txhim kho qhov hloov tshiab thiab xa tawm thaum tshawb nrhiav RLZ parameters. Qhov kev tso tawm tom ntej ntawm Chrome 80 yog teem rau Lub Ob Hlis 4th.

ntsiab hloov в Chrome 79:

• qhib Kev txheeb xyuas tus password, tsim los txheeb xyuas lub zog ntawm tus password siv los ntawm tus neeg siv. Thaum sim nkag mus rau txhua qhov chaw Password Checkup ua tiav tshawb xyuas tus ID nkag mus thiab lo lus zais tawm tsam cov ntaub ntawv ntawm cov nyiaj raug cuam tshuam nrog kev ceeb toom yog tias pom muaj teeb meem (kev tshuaj xyuas yog ua raws li tus lej hash prefix ntawm tus neeg siv sab). Daim tshev yog nqa tawm tawm tsam cov ntaub ntawv npog ntau dua 4 billion tus account uas tau tshwm sim hauv cov neeg siv cov ntaub ntawv xau. Kev ceeb toom tseem tshwm sim thaum sim siv cov passwords tsis tseem ceeb xws li "abc123". Txhawm rau tswj kev suav nrog Kev Tshawb Xyuas Tus password, qhov chaw tshwj xeeb tau ua tiav hauv ntu "Sync thiab Google Services".
• Ib qho tshiab thev naus laus zis rau kev ntes phishing hauv lub sijhawm tiag tiag tau nthuav tawm. Yav dhau los, kev pov thawj tau ua tiav los ntawm kev nkag mus rau hauv cheeb tsam rub tawm Safe Browsing blacklists, uas tau hloov kho kwv yees li ib zaug txhua 30 feeb, uas ua rau tsis txaus, piv txwv li, nyob rau hauv cov xwm txheej uas nquag hloov pauv los ntawm cov neeg tawm tsam. Txoj kev tshiab tso cai rau koj los tshuaj xyuas URLs ntawm ya nrog kev kuaj ua ntej tiv thaiv cov npe dawb uas suav nrog cov hashs ntawm ntau txhiab qhov chaw nrov uas muaj kev ntseeg siab. Yog tias lub vev xaib raug qhib tsis nyob hauv daim ntawv teev npe dawb, tus browser tshawb xyuas qhov URL ntawm Google server, xa thawj 32 cov khoom ntawm SHA-256 hash ntawm qhov txuas, los ntawm cov ntaub ntawv tus kheej tau raug txiav tawm. Raws li Google, txoj hauv kev tshiab tuaj yeem txhim kho cov txiaj ntsig ntawm kev ceeb toom rau cov chaw phishing tshiab los ntawm 30%.
• Ntxiv kev tiv thaiv tiv thaiv kev hloov pauv ntawm Google daim ntawv pov thawj thiab txhua tus passwords khaws cia hauv tus neeg saib xyuas tus password los ntawm phishing nplooj ntawv. Yog tias koj sim nkag mus rau tus password uas tau khaws cia rau ntawm qhov chaw uas tus password tsis nquag siv, tus neeg siv yuav raug ceeb toom txog qhov ua rau muaj kev phom sij.
• Kev sib txuas siv TLS 1.0 thiab 1.1 tam sim no qhia qhov ntsuas kev sib txuas tsis ruaj ntseg. Txhawb nqa TLS 1.0 thiab 1.1 yuav ua neeg tsis taus hauv Chrome 81, teem rau lub Peb Hlis 17, 2020.
• Ntxiv lub peev xwm los khov cov tabs tsis ua haujlwm, tso cai rau koj tuaj yeem tshem tawm ntawm lub cim xeeb tab uas tau nyob hauv keeb kwm yav dhau los ntev dua 5 feeb thiab tsis ua qhov tseem ceeb. Kev txiav txim siab txog qhov tsim nyog ntawm ib lub tab tshwj xeeb rau kev khov yog ua los ntawm heuristics. Ua kom muaj nuj nqi yog tswj los ntawm "chrome://flags/#proactive-tab-freeze" chij.
• ruaj ntseg Thaiv cov ntsiab lus sib xyaw ntawm nplooj ntawv qhib dua HTTPS kom ntseeg tau tias nplooj ntawv qhib dua https:// tsuas muaj cov peev txheej thauj khoom hla kev sib txuas lus ruaj ntseg. Txawm hais tias hom kev phom sij tshaj plaws ntawm cov ntsiab lus sib xyaw, xws li cov ntawv sau thiab iframes, twb raug thaiv los ntawm lub neej ntawd, cov duab, cov ntaub ntawv suab thiab cov yeeb yaj kiab tseem tuaj yeem rub tawm ntawm http://. Yav dhau los siv cov ntsiab lus sib xyaw ua ke rau cov ntawv ntxig no tau pom tias tsis muaj txiaj ntsig thiab ua rau tus neeg siv dag zog, vim nws tsis muab qhov kev ntsuas tsis meej ntawm kev ruaj ntseg ntawm nplooj ntawv. Piv txwv li, los ntawm cov duab spoofing, tus neeg tawm tsam tuaj yeem hloov cov neeg siv taug qab cov ncuav qab zib, sim siv qhov tsis zoo hauv cov duab processors, lossis ua yuam kev los ntawm kev hloov cov ntaub ntawv hauv daim duab. Txhawm rau lov tes taw lub xauv ntawm cov khoom sib xyaw, qhov chaw tshwj xeeb tau ntxiv, uas tuaj yeem nkag mus tau los ntawm cov ntawv qhia zaub mov uas tshwm thaum koj nyem rau ntawm lub cim xauv.
• Ntxiv qhov kev sim muaj peev xwm los qhia cov ntsiab lus ntawm cov ntawv teev cia ntawm desktop thiab mobile versions ntawm Chrome. Hauv qhov xwm txheej ntawm Chrome txuas rau ib tus account, tam sim no koj tuaj yeem nkag mus rau cov ntsiab lus ntawm cov ntawv teev cia ntawm lwm lub cuab yeej, suav nrog kev sib faib cov ntawv teev cia ntawm lub xov tooj ntawm tes thiab desktop. Cov ntsiab lus ntawm cov ntawv teev cia yog encrypted siv end-to-end encryption, uas tiv thaiv kev nkag mus rau cov ntawv nyeem ntawm Google servers. Txoj haujlwm tau qhib los ntawm cov kev xaiv chrome://flags#shared-clipboard-receiver, chrome://flags#shared-clipboard-ui thiab chrome://flags#sync-clipboard-service.
• Hauv qhov chaw nyob bar ntawm qee lub sijhawm (piv txwv li, thaum txuag tus password) thaum qhov profile synchronization raug kaw, ntxiv rau lub avatar, lub npe ntawm Google account tam sim no tau tshwm sim kom tus neeg siv tuaj yeem txheeb xyuas tus lej tam sim no.
• Activated rau 1% ntawm cov neeg siv yug "DNS dhau HTTPS" (DoH, DNS dhau HTTPS). Qhov kev sim no tsuas yog cov neeg siv uas lawv qhov kev teeb tsa tau teev tseg DNS cov chaw muab kev pabcuam uas txhawb nqa DoH. Piv txwv li, yog tias tus neeg siv muaj DNS 8.8.8.8 teev nyob rau hauv qhov system nqis, ces Google's DoH kev pabcuam (“https://dns.google.com/dns-query”) yuav qhib rau hauv Chrome; yog tias DNS yog 1.1.1.1. XNUMX, ces DoH Cloudflare kev pabcuam (“https://cloudflare-dns.com/dns-query”), thiab lwm yam. Txhawm rau tswj seb DoH puas tau qhib, qhov "chrome://flags/#dns-over-https" yog muab. Peb hom kev khiav hauj lwm tau txais kev txhawb nqa: ruaj ntseg, tsis siv neeg thiab tawm. Hauv "kev nyab xeeb" hom, cov tswv tau txiav txim siab tsuas yog raws li yav tas los cached ruaj ntseg qhov tseem ceeb (tau txais los ntawm kev sib txuas ruaj ntseg) thiab kev thov ntawm DoH; rov qab mus rau DNS li niaj zaus tsis siv. Hauv hom "tsis siv neeg", yog tias DoH thiab cov cache ruaj ntseg tsis muaj, cov ntaub ntawv tuaj yeem rov qab tau los ntawm cov cache tsis ruaj ntseg thiab nkag mus los ntawm cov tsoos DNS. Hauv "tawm" hom, qhov sib koom cache yog thawj zaug kuaj xyuas thiab yog tias tsis muaj cov ntaub ntawv, qhov kev thov raug xa los ntawm qhov system DNS.
• Ntxiv kev sim yug caching ntawm rendered cov ntsiab lus thaum hloov nplooj ntawv uas siv lub rau pem hauv ntej thiab nraub qaum nyees khawm, uas yuav txo tau qeeb qeeb thaum lub sij hawm hom kev taw qhia vim ua tiav caching ntawm tag nrho nplooj ntawv, uas tsis tas yuav rov ua dua thiab thauj khoom. Qhov kev ua kom zoo dua yog qhov tshwj xeeb tshaj yog pom nyob rau hauv version rau cov khoom siv txawb, qhov twg qhov kev ua tau zoo nce thaum lub sij hawm navigation nce mus txog 19%. Lub hom tau qhib siv "chrome: // chij # rov qab-forward-cache" kev xaiv.
• Rho tawm teeb "chrome://flags/#omnibox-ui-hide-steady-state-url-scheme-and-subdomains", uas tso cai rau rov qab cov zaub ntawm cov txheej txheem hauv qhov chaw nyob bar (tam sim no txhua qhov txuas tau ib txwm qhia yam tsis muaj https // thiab http: // /, thiab tsis muaj "www.").
• Tsim rau Windows suav nrog sandboxing ntawm cov kev pabcuam audio playback. Txhawm rau tswj xyuas seb qhov kev sib cais tau qhib, qhov cuab yeej AudioSandboxEnabled tau thov.
• Cov cuab yeej tswj hwm hauv nruab nrab rau kev lag luam suav nrog kev muaj peev xwm los txhais cov cai tswj hwm ntau npaum li cas lub cim xeeb browser tuaj yeem haus ua ntej cov tab tom qab raug tshem tawm. Lub cim xeeb tso tawm tom qab unloading ib tab yuav muaj rau siv, thiab cov ntsiab lus ntawm lub tab yog loaded dua thaum hloov mus rau nws.
• Linux siv cov ntaub ntawv pov thawj tsim ua haujlwm, uas hloov cov txheej txheem NSS yav dhau los. Nyob rau hauv cov ntaub ntawv no, lub built-in processor txuas ntxiv siv lub khw NSS thaum lub sij hawm pov thawj, tab sis imposes ntau stringent cov cai thaum ua tsis raug cai encoded thiab nyias daim ntawv pov thawj (txhua daim ntawv pov thawj yuav tsum tau ntawv pov thawj los ntawm ib tug ntawv pov thawj txoj cai).
• Hauv version rau Android platform ntxiv muaj peev xwm muab cov cim hloov pauv rau cov ntawv thov web uas tau khiav hauv Progressive Web Apps (PWA) hom. Adaptive icons tuaj yeem hloov mus rau lub interface siv los ntawm cov chaw tsim khoom, piv txwv li, ua puag ncig, square, lossis nrog cov ces kaum du.
• Ntxiv API WebXR Device, uas muab kev nkag mus rau cov khoom siv rau kev tsim virtual thiab augmented kev muaj tiag. API tso cai rau koj los koom ua ke ua haujlwm nrog ntau chav kawm ntawm cov khoom siv, los ntawm qhov chaw ruaj ntseg virtual reality headsets xws li Oculus Rift, HTC Vive thiab Windows Mixed Reality, rau cov kev daws teeb meem raws li cov khoom siv mobile xws li Google Daydream View thiab Samsung Gear VR. Cov ntawv thov uas API tshiab tuaj yeem siv tau suav nrog cov kev pab cuam rau kev saib cov yeeb yaj kiab hauv 360 ° hom, cov tshuab rau kev pom qhov chaw peb sab, tsim cov xinesmas virtual rau kev nthuav qhia video, ua cov kev sim ntawm kev tsim 3D interfaces rau cov khw muag khoom thiab cov chaw;
  

• Nyob rau hauv keeb kwm kev sim hom (kev sim nta uas yuav tsum tau cais ua kom) ob peb tshiab APIs tau raug npaj. Keeb Kwm Kev Txiav Txim hais txog kev muaj peev xwm ua haujlwm nrog API teev tseg los ntawm cov ntawv thov rub tawm los ntawm localhost lossis 127.0.0.1, lossis tom qab sau npe thiab tau txais lub cim tshwj xeeb uas siv tau rau lub sijhawm txwv rau ib qhov chaw tshwj xeeb.
  • Rau tag nrho cov ntsiab lus HTML, "rendersubtree" tus cwj pwm yog npaj, uas ua kom ntseeg tau tias cov zaub ntawm DOM lub ntsiab yog tsau. Kev teeb tsa tus cwj pwm rau "tsis pom" yuav tiv thaiv lub ntsiab lus los ntawm kev ua lossis tshuaj xyuas, tso cai rau kev ua kom zoo dua. Thaum teem rau "ua kom tau", tus browser yuav tshem tawm cov yam ntxwv tsis pom, ua cov ntsiab lus thiab ua kom pom.
  • Ntxiv API kev xaiv Wake xauv raws li kev cog lus mechanism, uas muab txoj hauv kev ruaj ntseg dua los tswj kev tsis ua haujlwm ntawm nws pib kaw cov ntxaij vab tshaus thiab hloov cov khoom siv rau hom kev txuag hluav taws xob.
• Ua kom muaj peev xwm siv tus cwj pwm autofocus rau tag nrho cov HTML thiab SVG cov ntsiab lus uas tuaj yeem muaj cov tswv yim tsom.
• Rau cov duab thiab yeeb yaj duab ruaj ntseg Xam qhov piv txwv raws li qhov dav lossis qhov siab qhov siab, uas tuaj yeem siv los txiav txim siab qhov loj ntawm daim duab siv CSS ntawm theem thaum cov duab tseem tsis tau thauj khoom ( daws qhov teeb meem nrog kev tsim kho nplooj ntawv tom qab cov duab raug thauj khoom).
• Ntxiv cov cuab yeej CSS font-kho qhov muag-sizing, uas tau txiav txim siab qhov sib txawv ntawm font loj hauv optical coordinates "opsz", yog tias font txhawb lawv. Cov hom tso cai rau koj xaiv qhov zoo tshaj plaws glyph zoo rau qhov loj me, piv txwv li, siv ntau qhov sib txawv glyphs rau cov npe.
• Ntxiv cov cuab yeej CSS lis-style-type, uas tso cai rau koj siv cov cim tsis yog lub sijhawm hauv cov npe, piv txwv li, "-", "+", "★" thiab "▸".
• Yog tias nws tsis tuaj yeem ua haujlwm Worklet.addModule(), cov khoom tam sim no rov qab los nrog cov ncauj lus kom ntxaws txog qhov kev ua yuam kev, uas tso cai rau koj los ntsuas qhov ua yuam kev ntau dua (cov teeb meem nrog kev sib txuas network, syntax tsis raug, thiab lwm yam. .).
• Nres ua cov khoom при их перемещении между документами. При переносе между документами также отключено выполнение связанных со скриптом событий «error» и «load».
• Hauv JavaScript cav V8 ua tau Kev ua kom zoo ntawm kev tuav cov kev hloov pauv rau cov sawv cev ntawm cov teb hauv cov khoom, ua rau AngularJS code ua tiav hauv Speedometer test suite khiav 4% sai dua.
  

• V8 kuj tseem ua kom zoo rau kev ua haujlwm ntawm getters uas tau teev tseg hauv APIs built-in, xws li Node.nodeType thiab Node.nodeName, thaum tsis muaj IC handler (inline caching). Qhov kev hloov pauv tau txo lub sij hawm siv ntawm IC runtime los ntawm kwv yees li 12% thaum khiav qhov Backbone thiab jQuery xeem los ntawm Speedometer suite.
  

• Cov txiaj ntsig ntawm OSR (hu ua on-stack hloov) cov txheej txheem yog cached, uas hloov kho cov cai thaum lub sijhawm ua haujlwm ua haujlwm (tso cai rau koj pib siv cov lej zoo rau kev ua haujlwm ntev yam tsis tau tos kom lawv rov ua haujlwm dua). OSR caching ua rau nws tuaj yeem siv cov txiaj ntsig kev ua kom zoo thaum rov ua haujlwm, tsis tas yuav rov qab ua kom zoo dua.
  Hauv qee qhov kev sim, qhov kev hloov pauv tau nce siab tshaj qhov ua tau zoo los ntawm 5-18%.
  

• Cov kev hloov hauv cov cuab yeej rau web developers:
  Nyob debugging hom los txiav txim qhov laj thawj ntawm kev thaiv kev thov lossis xa lub ncuav qab zib.
  
  • Nyob rau hauv lub thaiv nrog rau daim ntawv teev cov ncuav qab zib, lub peev xwm los saib sai sai tus nqi ntawm lub ncuav qab zib xaiv tau ntxiv los ntawm txhaj rau ntawm ib kab tshwj xeeb.
    

  • Ntxiv lub peev xwm los simulate qhov chaw sib txawv rau qhov nyiam-xim-txheej txheem thiab nyiam-tso-tso-tso tawm cov lus nug (piv txwv li, txhawm rau kuaj tus cwj pwm ntawm nplooj ntawv nrog lub ntsiab lus tsaus nti lossis nrog cov teebmeem animated xiam oob qhab).
    

  • Tus tsim ntawm Kev Pabcuam tab tau hloov kho tshiab, tso cai rau koj los ntsuas cov cai siv thiab tsis siv. Ntxiv lub peev xwm los lim cov ntaub ntawv los ntawm nws hom (JavaScript, CSS). Code siv cov ntaub ntawv kuj ntxiv thaum tso saib cov ntawv nyeem.
    

  • Ntxiv lub peev xwm los debug cov laj thawj ntawm kev thov ib qho kev pab cuam network tom qab kaw cov haujlwm hauv network (koj tuaj yeem saib cov kab ntawm JavaScript code hu uas ua rau kev thauj khoom ntawm cov peev txheej).
    

  • Ntxiv "Settings > Preferences > Sources > Default Indentation" teeb tsa los txiav txim seb hom indentation (2/4/8 qhov chaw lossis tabs) hauv cov cai tso tawm hauv Console thiab Sources panels.

Ntxiv nrog rau kev tsim kho tshiab thiab kho kab laum, tus tshiab version tshem tawm 51 qhov tsis zoo. Ntau qhov tsis zoo tau raug txheeb xyuas raws li qhov tshwm sim ntawm kev ntsuas tsis siv neeg siv qhov chaw nyob Sanitizer, MemorySanitizer, Tswj Flow Integrity, LibFuzzer thiab AFL cov cuab yeej. Ob qhov teeb meem (CVE-2019-13725, nkag mus rau lub cim xeeb uas twb tau tso tawm hauv cov lej rau kev txhawb nqa Bluetooth, thiab CVE-2019-13726, heap overflow nyob rau hauv tus password tus thawj tswj) tau cim tias tseem ceeb, i.e. tso cai rau koj hla txhua theem ntawm kev tiv thaiv browser thiab ua tiav cov cai ntawm lub kaw lus sab nraud sandbox ib puag ncig. Nov yog thawj zaug uas ob qhov teeb meem tseem ceeb tau raug txheeb xyuas nyob rau hauv tib lub voj voog kev loj hlob hauv Chrome. Thawj qhov tsis zoo tau pom los ntawm cov kws tshawb fawb los ntawm Tencent Keen Security Lab thiab ua qauv qhia ntawm Tianfu Cup kev sib tw, thiab qhov thib ob tau pom los ntawm Sergei Glazunov los ntawm Google Project Zero.

Raws li ib feem ntawm qhov kev pab cuam nyiaj ntsuab rau kev tshawb pom qhov tsis zoo rau qhov kev tso tawm tam sim no, Google tau them 37 khoom plig muaj nqis txog $ 80000 (ib qho $ 20000 khoom plig, ib qho $ 10000 khoom plig, ob $ 7500 khoom plig, plaub $ 5000 khoom plig, ib qho $ 3000 khoom plig, ob $ 2000 khoom plig, ob $ 1000 $500 khoom plig). Qhov loj ntawm 15 khoom plig tseem tsis tau txiav txim siab.

Tau qhov twg los: opennet.ru