Lub web browser raug tso tawm Thiab Firefox 68.8 rau Android platform. Ntxiv rau, qhov hloov tshiab tau tsim nrog kev txhawb nqa mus ntev . Yuav los sai sai no Firefox 77 ceg yuav hloov pauv, qhov kev tso tawm uas tau teem rau Lub Rau Hli 2.
:
- lub peev xwm ntawm Lockwise system add-on muaj nyob rau hauv browser, uas muaj "hais txog: logins" interface rau kev tswj cov passwords khaws tseg. Cov lus ceeb toom tam sim no tau tshwm sim rau cov nyiaj khaws tseg cuam tshuam nrog cov chaw uas yav dhau los tau ntsib hacks nrog cov ntaub ntawv pov thawj. Kev ceeb toom tshwm sim yog tias tus password nkag hauv Firefox tsis tau hloov kho txij li lub xaib raug cuam tshuam.
Tsis tas li ntawd ntxiv yog ceeb toom tias cov passwords siv ntawm ntau lub vev xaib tau raug cuam tshuam. Yog tias ib qho ntawm cov nyiaj khaws tseg tau koom nrog hauv kev tso cai nkag mus thiab tus neeg siv rov siv tib lo lus zais ntawm lwm qhov chaw, nws yuav raug qhia kom hloov tus password. Kev txheeb xyuas yog ua los ntawm kev sib koom ua ke nrog qhov project database , uas suav nrog cov ntaub ntawv hais txog 9.5 billion tus account raug nyiag los ntawm kev nyiag ntawm 443 qhov chaw. Txoj kev yog tsis qhia npe thiab yog raws li kev sib kis ntawm SHA-1 hash prefix los ntawm email (thawj ob peb cim), nyob rau hauv cov lus teb rau cov neeg rau zaub mov tsim tus Tsov tus tw hashs sib haum mus rau qhov kev thov los ntawm nws cov database, thiab lub browser ntawm nws sab xyuas lawv. nrog rau tag nrho cov hash uas twb muaj lawm thiab, yog tias muaj kev sib tw, teeb meem ceeb toom (tag nrho hash tsis kis).
Tus naj npawb ntawm qhov chaw uas cov haujlwm tau siv tau raug nthuav dav muaj zog passwords thaum sau cov ntawv sau npe. Yav dhau los, ib qho lus qhia qhia tus password muaj zog tsuas yog tshwm sim yog tias muaj cov teb nrog tus cwj pwm "autocomplete = new-password". Txawm hais tias qhov chaw siv, tus password tuaj yeem tsim los ntawm cov ntawv qhia zaub mov.
Hauv Windows thiab macOS, yog tias Firefox tsis muaj tus lej password, kev txhawb nqa rau kev nthuav qhia OS authentication dialog thiab nkag mus rau hauv cov ntaub ntawv pov thawj ua ntej saib cov passwords khaws tseg. Tom qab nkag mus rau qhov system lo lus zais, nkag mus rau cov passwords khaws cia rau 5 feeb, tom qab ntawd tus password yuav tsum tau nkag dua. Qhov kev ntsuas no yuav tiv thaiv koj cov ntawv pov thawj los ntawm prying ob lub qhov muag yog tias lub khoos phis tawj tso tseg tsis muaj neeg saib xyuas yog tias tus password tsis tau teeb tsa hauv qhov browser.
- ua haujlwm "", uas yog neeg xiam los ntawm lub neej ntawd. Thaum lub hom qhib siv lub "dom.security.https_only_mode" parameter nyob rau hauv hais txog: config, tag nrho cov kev thov uas tsis tau encryption yuav cia li redirected rau ruaj ntseg nplooj ntawv xaiv ("http://" rau "https://"). Kev hloov pauv yog nqa tawm ob qho tib si ntawm cov khoom siv thauj khoom ntawm nplooj ntawv, thiab thaum nkag mus rau hauv qhov chaw nyob bar. Yog tias qhov kev sim nkag mus rau qhov chaw nyob nkag rau hauv qhov chaw nyob bar ntawm https xaus rau lub sijhawm, tus neeg siv yuav raug pom ib nplooj ntawv yuam kev nrog lub pob kom thov ntawm http://. Nyob rau hauv cov ntaub ntawv ntawm tsis ua hauj lwm thaum thauj khoom ntawm "https://" subresources loaded thaum lub sij hawm ua nplooj ntawv, xws li tsis ua hauj lwm yuav tsis quav ntsej, tab sis cov lus ceeb toom yuav tshwm nyob rau hauv lub web console, uas yuav saib tau los ntawm lub web developer cov cuab yeej.
- Ntxiv lub peev xwm los hloov pauv sai ntawm kev saib cov yeeb yaj kiab hauv "Β» (Duab-hauv-Duab) thiab saib puv npo. Tus neeg siv tuaj yeem txo qhov vis dis aus mus rau lub qhov rais me me thiab ib txhij ua lwm yam haujlwm, suav nrog hauv lwm daim ntawv thov thiab ntawm virtual desktops. Yog hais tias koj xav tig tag nrho koj cov xim rau cov yees duab, tsuas yog ob-nias mus rau puv npo saib. Double-clicking dua yuav rov qab saib mus rau hom duab-hauv-daim duab.
- Kev ua haujlwm tau ua tiav los txhim kho qhov pom thiab yooj yim ntawm kev ua haujlwm nrog qhov chaw nyob bar. Thaum qhib lub tab tshiab, tus duab ntxoov ntxoo nyob ib ncig ntawm qhov chaw nyob bar tau raug txo. Lub bookmarks bar tau nthuav dav me ntsis kom nce qhov chaw clickable ntawm cov vijtsam kov.
- Hauv Wayland raws li ib puag ncig siv
muaj peev xwm ntawm kho vajtse acceleration ntawm decoding ntawm VP9 thiab lwm yam video tawm tswv yim txhawb nyob rau hauv Firefox. Kev nrawm yog muab siv VA-API (Video Acceleration API) thiab FFmpegDataDecoder (tsuas yog H.264 kev txhawb nqa tau ua tiav hauv qhov kev tso tawm dhau los). Txhawm rau tswj xyuas seb puas muaj kev ua kom nrawm, koj yuav tsum teeb tsa qhov "widget.wayland-dmabuf-webgl.enabled" thiab "widget.wayland-dmabuf-vaapi.enabled" nyob rau hauv hais txog: config. - Hauv Windows, rau cov neeg siv ntawm lub khoos phis tawj nrog Intel GPU thiab lub vijtsam daws teeb meem tsis pub ntau tshaj 1920x1200, cov txheej txheem sib xyaw yog qhib los ntawm lub neej ntawd , sau ua lus Rust thiab outsources nplooj ntawv cov ntsiab lus ua haujlwm rau GPU sab.
- Ntxiv cov khoom txhawb nqa , uas
tso cai rau siv cov interfaces ΠΈ , khiav sab nraum cov xov tseem ceeb ntawm kev tua hauv Firefox. API tshiab tso cai rau koj los ua cov suab hauv lub sijhawm tiag tiag, programmatically tswj cov suab tsis muaj kev qhia ntxiv qeeb lossis cuam tshuam rau kev ruaj ntseg ntawm lub suab tso tawm. Kev taw qhia ntawm AudioWorklet ua rau nws muaj peev xwm txuas rau Zoom hu hauv Firefox yam tsis muaj kev txhim kho cais cov add-ons, thiab tseem ua rau nws muaj peev xwm siv cov txheej txheem ua suab nrov hauv qhov browser, xws li spatial audio rau virtual reality systems lossis games. - Hauv CSS , uas txhais qhov system xim qhov tseem ceeb (CSS Xim Module Theem 4).
- Cov Intl.NumberFormat, Intl.DateTimeFormat, thiab Intl.RelativeTimeFormat constructors pab ua cov txheej txheem ntawm "numberingSystem" thiab "calendar" xaiv los ntawm lub neej ntawd. Piv txwv li: "Intl.NumberFormat('en-US', { numberingSystem: 'latn' })" los yog "Intl.DateTimeFormat('th', { calendar: 'gregory' })".
- Kev thaiv cov txheej txheem tsis paub yog qhib rau hauv txoj kev xws li "location.href" lossis .
- Thaum kuaj qhov kev nthuav qhia ntawm qhov chaw ntawm lub xov tooj ntawm tes siv hom kev tsim qauv hauv lub vev xaib cov cuab yeej tsim tawm, simulation ntawm tus cwj pwm ntawm lub xov tooj ntawm tes thaum tuav ob-kais zoom yog muab. Ua raws li kev ua kom raug ntawm cov cim npe meta-viewport, uas ua rau nws muaj peev xwm ua kom zoo dua koj qhov chaw rau Firefox rau Android yam tsis muaj lub xov tooj ntawm tes.
- Nyob rau hauv lub interface rau kev soj ntsuam kev thov network, thaum koj muab ob npaug rau-nias rau ntawm kem cais nyob rau hauv lub header, qhov luaj li cas ntawm lub rooj kem yog txiav mus rau hauv cov ntaub ntawv tso tawm.
- Ib qho tshiab Control lim tau ntxiv rau WebSocket tshuaj xyuas interface rau kev tso saib cov thav duab tswj. Siv lub peev xwm los saib ua ntej cov lus hauv hom ntawv , uas tau muab ntxiv rau hauv daim ntawv teev cov kev cai formatted, zoo ib yam li socket.io, SignalR thiab WAMP.
- JavaScript debugger tam sim no muaj peev xwm tsis quav ntsej cov ntaub ntawv uas tsis koom nrog kev debugging. Cov ntawv qhia zaub mov "blackbox" muaj cov kev xaiv los nkaum cov ntsiab lus nyob rau hauv lossis sab nraum cov npe xaiv hauv sidebar. Thaum luam cov kab ke, xyuas kom meej tias tag nrho txoj hauv kev tau muab tso rau ntawm daim ntawv teev cia, tsis yog cov npe ntawm cov ntaub ntawv.
- Nyob rau hauv lub web console, nyob rau hauv multi-kab hom, nws muaj peev xwm mus nkaum code fragments tshaj tsib kab (kom nthuav, nyem nyob qhov twg nyob rau hauv lub cheeb tsam nrog cov code qhia).
Ntxiv nrog rau kev tsim kho tshiab thiab kho kab laum, Firefox 76 tau kho , ntawm 10 (CVE-2020-12387, CVE-2020-12388 thiab 8 nyob rau hauv CVE-2020-12395) raug cim tias yog ib qho tseem ceeb thiab muaj peev xwm ua rau muaj kev tua tus neeg tawm tsam thaum qhib nplooj ntawv tsim tshwj xeeb. CVE-2020-12388 qhov tsis muaj peev xwm tso cai rau koj tawm ntawm sandbox ib puag ncig hauv Windows los ntawm kev tswj hwm kev nkag mus rau tokens. Qhov tsis txaus ntseeg CVE-2020-12387 yog txuam nrog kev nkag mus rau qhov thaiv kev nco uas twb tau tso tseg (Siv-tom qab-dawb) thaum Web Worker xaus. CVE-2020-12395 pawg teeb meem nco xws li tsis muaj dej ntws.
Tau qhov twg los: opennet.ru