Lub web browser raug tso tawm Thiab Firefox 68.6 rau Android platform. Ntxiv rau, qhov hloov tshiab tau tsim nrog kev txhawb nqa mus ntev . Yuav los sai sai no Firefox 75 ceg yuav txav mus, qhov kev tso tawm uas tau teem rau lub Plaub Hlis 7 (qhov project rau 4-5 lub lis piam ). Rau Firefox 75 beta ceg tsim rau Linux hauv Flatpak hom.
:
- Linux tsim siv lub tshuab cais tawm , tsom rau kev thaiv cov kev siv ntawm qhov tsis zoo hauv cov tsev qiv ntawv thib peb. Nyob rau theem no, kev cais tawm tsuas yog qhib rau lub tsev qiv ntawv xwb , lub luag haujlwm rau rendering fonts. RLBox suav nrog C / C ++ code ntawm lub tsev qiv ntawv cais rau hauv qib qis WebAssembly intermediate code, uas yog tom qab ntawd tsim los ua WebAssembly module, cov kev tso cai uas tau teeb tsa hauv kev sib raug zoo rau qhov module no xwb. Lub rooj sib dhos module ua haujlwm nyob rau hauv ib qho chaw nco thiab tsis muaj kev nkag mus rau qhov chaw nyob seem. Yog tias muaj qhov tsis zoo hauv lub tsev qiv ntawv raug siv, tus neeg tawm tsam yuav raug txwv thiab yuav tsis tuaj yeem nkag mus rau qhov chaw nco ntawm cov txheej txheem tseem ceeb lossis hloov kev tswj xyuas sab nraum ib puag ncig.
- DNS dhau HTTPS hom (DoH, DNS dhau HTTPS) rau cov neeg siv US. Lub neej ntawd DNS tus muab kev pabcuam yog CloudFlare (mozilla.cloudflare-dns.com Π² Roskomnadzor), thiab NextDNS yog muaj raws li kev xaiv. Hloov chaw muab kev pab lossis pab kom DoH hauv cov tebchaws uas tsis yog Asmeskas, nyob rau hauv lub network kev twb kev txuas teeb tsa. Koj tuaj yeem nyeem ntxiv txog DoH hauv Firefox ntawm .
- txhawb rau TLS 1.0 thiab TLS 1.1 raws tu qauv. Txhawm rau nkag mus rau cov vev xaib hla kev sib txuas lus ruaj ntseg, tus neeg rau zaub mov yuav tsum muab kev txhawb nqa tsawg kawg TLS 1.2. Raws li Google, tam sim no kwv yees li 0.5% ntawm nplooj ntawv web downloads txuas ntxiv mus siv cov ntawv tsis tu ncua ntawm TLS. Kev kaw tau ua raws li IETF (Internet Engineering Task Force). Yog vim li cas tsis kam txhawb TLS 1.0/1.1 yog qhov tsis muaj kev txhawb nqa rau niaj hnub ciphers (piv txwv li, ECDHE thiab AEAD) thiab qhov yuav tsum tau los txhawb cov qub ciphers, qhov kev ntseeg siab ntawm cov lus nug nyob rau theem tam sim no ntawm kev txhim kho kev siv tshuab computer ( Piv txwv li, kev txhawb nqa rau TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA yog yuav tsum tau, MD5 yog siv rau kev kuaj xyuas kev ncaj ncees thiab kev lees paub thiab SHA-1). Thaum sim siv TLS 1.0 thiab TLS 1.1 pib nrog Firefox 74, qhov yuam kev yuav tshwm sim. Koj tuaj yeem rov qab muaj peev xwm ua haujlwm nrog cov tsis tu ncua TLS versions los ntawm kev teeb tsa security.tls.version.enable-deprecated = muaj tseeb lossis los ntawm kev siv lub pob ntawm nplooj ntawv yuam kev tshwm sim thaum mus saib ib qhov chaw nrog cov txheej txheem qub.
- Daim ntawv tso tawm pom zoo ib qho ntxiv , uas cia li thaiv cov neeg thib peb Facebook widgets siv rau kev lees paub, tawm tswv yim, thiab nyiam. Facebook cov cim qhia tsis tau raug cais tawm hauv ib lub thawv cais, ua rau nws nyuaj rau txheeb xyuas tus neeg siv nrog cov chaw lawv mus ntsib. Lub peev xwm ua haujlwm nrog lub vev xaib tseem ceeb Facebook tseem nyob, tab sis nws raug cais tawm ntawm lwm qhov chaw.
Rau kev hloov pauv hloov pauv ntawm qhov chaw tsis txaus ntseeg, ib qho ntxiv-on tau thov nrog rau kev siv lub tswv yim ntawm cov ntsiab lus ntim ntim. Cov thawv ntim khoom muab lub peev xwm cais cov ntsiab lus sib txawv yam tsis tas yuav tsim cov profiles cais, uas tso cai rau koj cais cov ntaub ntawv ntawm ib pawg ntawm nplooj ntawv. Piv txwv li, koj tuaj yeem tsim cov chaw sib cais, cais rau kev sib txuas lus ntawm tus kheej, kev ua haujlwm, kev yuav khoom thiab kev lag luam hauv tuam txhab nyiaj, lossis teeb tsa kev siv tib lub sijhawm ntawm cov neeg siv nyiaj sib txawv ntawm ib qhov chaw. Txhua lub thawv siv cais cov khw muag khoom qab zib, Local Storage API, indexedDB, cache, thiab OriginAttributes cov ntsiab lus.
- Ntxiv "browser.tabs.allowTabDetach" teeb tsa rau: config los tiv thaiv tabs los ntawm kev tso tawm mus rau qhov rais tshiab. Kev sib tsoo tab detachment yog ib qho kev ntxhov siab tshaj plaws ntawm Firefox uas yuav tsum tau kho. 9 xyoo. Tus browser tso cai rau tus nas rub lub tab rau hauv lub qhov rais tshiab, tab sis nyob rau hauv qee qhov xwm txheej lub tab tau muab tso rau hauv ib lub qhov rai cais thaum lub sijhawm ua haujlwm thaum tus nas txav tsis tu ncua thaum nyem rau ntawm tab.
- kev them nyiaj yug rau add-ons ntsia nyob rau hauv ib tug roundabout txoj kev thiab tsis khi rau cov neeg siv profiles. Qhov kev hloov pauv tsuas yog cuam tshuam rau kev teeb tsa ntawm add-ons hauv cov npe sib koom (/usr/lib/mozilla/extensions/, /usr/share/mozilla/extensions/ or ~/.mozilla/extensions/) ua tiav los ntawm tag nrho Firefox piv txwv ntawm lub kaw lus ( tsis cuam tshuam nrog tus neeg siv). Txoj kev no feem ntau yog siv rau pre-installing add-ons nyob rau hauv distributions, rau unsolicited hloov nrog peb-tog daim ntawv thov, rau integrating siab phem add-ons, los yog cais xa ib tug add-on nrog nws tus kheej installer. Nyob rau hauv Firefox 73, yav tas los yuam-ntsuas add-ons tau cia li txav los ntawm cov kev qhia sib koom rau ib tus neeg siv cov ntaub ntawv thiab tam sim no tuaj yeem ua tau. los ntawm tus thawj tswj hwm add-on tsis tu ncua.
- Hauv Lockwise system add-on suav nrog hauv browser, uas muaj "hais txog: logins" interface rau kev tswj cov passwords khaws tseg, txheeb hauv qhov kev txiav txim rov qab (Z rau A).
- WebRTC tau nce kev tiv thaiv tawm tsam cov ntaub ntawv hais txog qhov chaw nyob IP sab hauv thaum lub suab thiab video hu siv "", zais qhov chaw nyob hauv zos tom qab ib qho dynamically generated random identifier txiav txim los ntawm Multicast DNS.
- Hloov qhov chaw ntawm daim duab-hauv-daim duab hloov pauv uas sib tshooj ntawm cov duab tom ntej hauv cov batch upload duab interface ntawm Instagram.
- Hauv JavaScript tus neeg teb xov tooj "?.", tsim los tshawb xyuas tag nrho cov saw ntawm cov khoom lossis hu. Piv txwv li, los ntawm kev qhia "db?.user?.name?.length" tam sim no koj tuaj yeem nkag mus rau tus nqi ntawm "db.user.name.length" yam tsis muaj kev kuaj xyuas ua ntej. Yog tias ib qho khoom ua tiav raws li null lossis tsis tau txhais, cov zis yuav yog "undefined".
- kev txhawb nqa ntawm cov vev xaib thiab hauv add-ons rau Object.toSource() txoj kev thiab lub ntiaj teb ua haujlwm uneval().
- Kev tshwm sim tshiab ntxiv thiab cov cuab yeej cuab tam , uas tso cai rau koj hu rau tus tuav ntaub ntawv thaum tus neeg siv hloov cov lus interface.
- HTTP header processing enabled (), tso cai rau cov chaw los tiv thaiv kev nkag ntawm cov peev txheej (piv txwv li, cov duab thiab cov ntawv sau) thauj khoom los ntawm lwm qhov chaw (hloov keeb kwm thiab cross-site). Lub header tuaj yeem siv ob qhov txiaj ntsig: "tseem-keeb kwm" (tsuas yog thov rau cov peev txheej nrog tib lub tswv yim, tus tswv lub npe thiab tus lej chaw nres nkoj) thiab "sib-site" (tsuas yog thov los ntawm tib lub xaib).
Cross-Origin-Resource-Policy: tib-site
- HTTP header enabled los ntawm lub neej ntawd , uas tso cai rau koj los tswj tus cwj pwm ntawm API thiab pab kom muaj qee yam nta (piv txwv li, koj tuaj yeem lov tes taw nkag mus rau Geolocation API, lub koob yees duab, microphone, puv npo, autoplay, encrypted-media, animation, Payment API, synchronous XMLHttpRequest hom, lwm yam). Rau iframe blocks, tus cwj pwm "", uas tuaj yeem siv rau hauv nplooj ntawv code los muab txoj cai rau qee cov iframe blocks.
Feature-Txoj Cai: microphone 'tsis muaj'; geolocation 'tsis muaj'
Yog tias lub vev xaib tso cai, los ntawm "tso cai" tus cwj pwm, ua haujlwm nrog cov peev txheej rau ib qho tshwj xeeb iframe, thiab qhov kev thov tau txais los ntawm iframe kom tau txais kev tso cai los ua haujlwm nrog cov peev txheej no, tam sim no browser nthuav qhia kev sib tham rau kev tso cai hauv Cov ntsiab lus ntawm nplooj ntawv tseem ceeb thiab muab cov cai lees paub los ntawm tus neeg siv mus rau iframe (tshwj tsis yog kev lees paub cais rau iframe thiab nplooj ntawv loj). Tab sis, yog tias nplooj ntawv tseem ceeb tsis muaj kev tso cai rau cov peev txheej thov los ntawm kev tso cai tus cwj pwm, iframe tau nkag mus rau cov peev txheej tam sim ntawd , yam tsis tau tso saib lub dialog rau tus neeg siv.
- CSS cov cuab yeej txhawb nqa yog qhib los ntawm lub neej ntawd '', uas txiav txim siab txoj hauj lwm ntawm cov ntawv hauv qab ntawm cov ntawv nyeem (piv txwv li, thaum tso cov ntawv vertically, koj tuaj yeem teeb tsa cov kab hauv qab ntawm sab laug lossis sab xis, thiab thaum pom kab rov tav, tsis yog los ntawm hauv qab, tab sis kuj los ntawm saum toj). Ntxiv rau hauv CSS cov khoom uas tswj cov kab hauv qab ΠΈ Ntxiv kev txhawb nqa rau kev siv tus nqi feem pua.
- Hauv CSS cov cuab yeej , uas txhais cov kab style nyob ib ncig ntawm cov ntsiab lus, defaults rau "auto" (yav tas los vim muaj teeb meem hauv GNOME).
- Hauv JavaScript debugger lub peev xwm los debug nested Web Workers, qhov kev ua ntawm uas yuav raug ncua thiab debugged kauj ruam yog kauj ruam siv breakpoints.
- Lub vev xaib tshuaj xyuas lub vev xaib tam sim no muab cov lus ceeb toom rau CSS cov khoom uas nyob ntawm z-index, sab saum toj, sab laug, hauv qab, thiab txoj cai nyob hauv cov ntsiab lus.
- Rau Windows thiab macOS, muaj peev xwm import cov ntaub ntawv los ntawm Microsoft Edge browser raws li Chromium cav tau siv.
Ntxiv nrog rau kev tsim kho tshiab thiab kho kab laum, Firefox 74 tau kho , ntawm uas 10 (sau hauv qab ΠΈ ) yog flagged li muaj peev xwm ua rau attacker code tua thaum qhib nplooj ntawv tsim tshwj xeeb. Cia peb nco ntsoov koj tias cov teeb meem nco, xws li tsis muaj dej ntws tawm thiab nkag mus rau thaj chaw nco tau tso tseg, tsis ntev los no tau raug cim tias muaj kev phom sij, tab sis tsis tseem ceeb.
Tau qhov twg los: opennet.ru