{"id":33343,"date":"2019-10-31T21:52:06","date_gmt":"2019-10-31T18:52:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-chrome-poyavitsya-zashhita-ot-peredachi-storonnih-cookie-i-skrytoj-identifikatsii\/"},"modified":"2019-10-31T21:52:06","modified_gmt":"2019-10-31T18:52:06","slug":"v-chrome-poyavitsya-zashhita-ot-peredachi-storonnih-cookie-i-skrytoj-identifikatsii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/v-chrome-poyavitsya-zashhita-ot-peredachi-storonnih-cookie-i-skrytoj-identifikatsii","title":{"rendered":"Chrome \u0107e uklju\u010divati za\u0161titu od prijenosa tre\u0107ih kola\u010di\u0107a i skrivenih identifikacija","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Tvrtka Google predstavila<\/a><\/noindex> nadolaze\u0107e promjene u Chromeu, usmjerene na pobolj\u0161anje privatnosti. Prvi dio promjena odnosi se na obradu kola\u010di\u0107a i podr\u0161ku za atribut SameSite. Po\u010dev\u0161i od izdanja Chrome 76, o\u010dekivanog u srpnju, bit \u0107e aktiviran<\/a><\/noindex> zastava «same-site-by-default-cookies», koja \u0107e po defaultu postaviti vrednost «SameSite=Lax» ako atribut SameSite nije prisutan u zaglavlju Set-Cookie, ograni\u010davaju\u0107i slanje kola\u010di\u0107a za umetke sa drugih sajtova (ali sajtovi i dalje mogu poni\u0161titi ograni\u010denje eksplicitnim postavljanjem vrednosti SameSite=None prilikom postavljanja kola\u010di\u0107a).<\/p>\n

Atribut SameSite<\/a><\/noindex> omogu\u0107uje odre\u0111ivanje situacija u kojima je prihvatljivo slanje kola\u010di\u0107a kada dolazi zahtjev s vanjske web stranice. Trenutno, preglednik \u0161alje kola\u010di\u0107e na svaki zahtjev za web stranicu za koju su postavljeni kola\u010di\u0107i, \u010dak i ako je izvorno otvorena druga web stranica, a pristup se obavlja neizravno putem u\u010ditavanja slike ili putem iframea. Ogla\u0161iva\u010dke mre\u017ee koriste ovu zna\u010dajku za pra\u0107enje kretanja korisnika izme\u0111u web stranica, a
\nnapada\u010di za organizaciju CSRF napada<\/a><\/noindex> (kada se otvori resurs pod kontrolom napada\u010da, na njegovim stranicama tajno se \u0161alje zahtjev drugoj web stranici na kojoj je trenutni korisnik autentificiran, a preglednik korisnika \u0161alje sesijske kola\u010di\u0107e s takvog zahtjeva). S druge strane, mogu\u0107nost slanja kola\u010di\u0107a na vanjske web stranice koristi se za umetanje widgeta na stranice, na primjer, za integraciju s YouTubeom ili Facebookom.<\/p>\n

Atribut SameSite omogu\u0107ava upravljanje pona\u0161anjem prilikom postavljanja kola\u010di\u0107a i dozvoljava slanje kola\u010di\u0107a samo kao odgovor na zahteve koji poti\u010du sa sajta s kojeg su kola\u010di\u0107i prvobitno dobijeni. SameSite mo\u017ee imati tri vrednosti «Strict», «Lax» i «None». U re\u017eimu ‘Strict’ kola\u010di\u0107i se ne \u0161alju za bilo koju vrstu me\u0111usajtnih zahteva, uklju\u010duju\u0107i sve ulazne veze sa spolja\u0161njih sajtova. U re\u017eimu ‘Lax’ primenjuju se bla\u017ea ograni\u010denja i prenos kola\u010di\u0107a se blokira samo za me\u0111usajtne sub-zahteve, kao \u0161to su zahtevi za slikama ili u\u010ditavanje sadr\u017eaja putem iframe-a. Razlika izme\u0111u «Strict» i «Lax» svodi se na blokadu kola\u010di\u0107a prilikom prelaska putem linka.<\/p>\n

Iz drugih predstoje\u0107ih promena planira se primena strogog ograni\u010denja koje \u0107e zabraniti obradu spolja\u0161njih kola\u010di\u0107a za zahteve bez HTTPS-a (kola\u010di\u0107i sa atributom SameSite=None mo\u0107i \u0107e se postaviti samo u re\u017eimu Secure). Osim toga, planira se rad na za\u0161titi od kori\u0161\u0107enja skrivene identifikacije («browser fingerprinting»), uklju\u010duju\u0107i metode generisanja identifikatora na osnovu indirektnih podataka, kao \u0161to su rezolucije ekrana<\/a><\/noindex>, popis podr\u017eanih MIME tipova, specifi\u010dne parametre u zaglavljima (HTTP\/2<\/a><\/noindex> i HTTPS<\/a><\/noindex>), analiza instaliranih pluginova i fontova<\/a><\/noindex>, dostupnost odre\u0111enih Web API, specifi\u010dnih za grafi\u010dke kartice karakteristike<\/a><\/noindex> renderiranja putem WebGL i Canvas, manipulacija<\/a><\/noindex> s CSS-om, analiza karakteristika rada s mi\u0161em<\/a><\/noindex> i tipkovnicom<\/a><\/noindex>.<\/p>\n

Osim toga, u Chrome bit \u0107e dodana<\/a><\/noindex> za\u0161tita od zloupotreba, povezanih sa ote\u017eavanjem povratka na po\u010detnu stranicu nakon prelaska na drugi sajt. Re\u010d je o praksi preoptere\u0107enja istorije prelaza serijom automatskih preusmeravanja ili ve\u0161ta\u010dkim dodavanjem la\u017enih zapisa u istoriju pregleda (kroz pushState), zbog \u010dega korisnik ne mo\u017ee iskoristiti dugme «Back» za povratak na po\u010detnu stranicu nakon slu\u010dajnog prelaska ili prisilnog preusmeravanja na sajt prevaranata ili zlonamernih subjekata. Kako bi se za\u0161titio od sli\u010dnih manipulacija, Chrome \u0107e u obradi dugmeta Back presko\u010diti zapise povezane sa automatskim preusmeravanjima i manipulacijama istorijom pregledanja, ostavljaju\u0107i samo stranice koje su otvorene putem o\u010diglednih radnji korisnika.<\/p>\n

<\/a><\/noindex><\/p>\n

Izvor: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0433\u0440\u044f\u0434\u0443\u0449\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 Chrome, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Cookie \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430 SameSite. \u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 Chrome 76, \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u043e\u0433\u043e \u0432 \u0438\u044e\u043b\u0435, \u0431\u0443\u0434\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u0444\u043b\u0430\u0433 «same-site-by-default-cookies», \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430 SameSite \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 Set-Cookie \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 «SameSite=Lax», \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 Cookie \u0434\u043b\u044f \u0432\u0441\u0442\u0430\u0432\u043a\u043e\u043a \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33343","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47U Chromeu \u0107e se pojaviti za\u0161tita od prijenosa tre\u0107ih kola\u010di\u0107a i skrivene identifikacije | ProHoster","description":"Tvrtka Google predstavila je nadolaze\u0107e izmjene u Chromeu, usmjerene na pobolj\u0161anje.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/v-chrome-poyavitsya-zashhita-ot-peredachi-storonnih-cookie-i-skrytoj-identifikatsii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Chrome \u043f\u043e\u044f\u0432\u0438\u0442\u0441\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 Cookie \u0438 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0433\u0440\u044f\u0434\u0443\u0449\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 Chrome, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/v-chrome-poyavitsya-zashhita-ot-peredachi-storonnih-cookie-i-skrytoj-identifikatsii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:52:06+00:00","article:modified_time":"2019-10-31T18:52:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33343","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 14:52:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:42:23","updated":"2026-01-21 14:52:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/33343","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=33343"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/33343\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=33343"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=33343"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=33343"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}