{"id":39042,"date":"2019-10-31T22:27:33","date_gmt":"2019-10-31T19:27:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome\/"},"modified":"2019-10-31T22:27:33","modified_gmt":"2019-10-31T19:27:33","slug":"usilenie-izolyatsii-mezhdu-sajtami-v-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome","title":{"rendered":"Ja\u010danje izolacije izme\u0111u web stranica u Chromeu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Tvrtka Google <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.chromium.org\/2019\/10\/recent-site-isolation-improvements.html\">najavila<\/a><\/noindex> o ja\u010danju u Chrome modu <noindex><a rel=\"nofollow\" href=\"https:\/\/www.chromium.org\/Home\/chromium-security\/site-isolation\">me\u0111usajamske izolacije<\/a><\/noindex>, koji omogu\u0107uje obradu stranica s razli\u010ditih sajtova u odvojenim izoliranim procesima. Mod me\u0111usajamske izolacije omogu\u0107ava za\u0161titu korisnika od napada koji se mogu izvr\u0161iti putem kori\u0161tenih na sajtu eksternih blokova, poput iframe umetanja, ili za blokiranje curenja podataka putem ugra\u0111enih legitimnih blokova (na primjer, s zahtjevima za bankarske usluge, na kojima mo\u017ee biti autentificiran korisnik) na zlonamjernim sajtovima.<\/p>\n<p>Pri razdvajanju obrtnika prema domeni, u svakom procesu se nalaze podaci samo jednog sajta, \u0161to ote\u017eava izvo\u0111enje napada usmjerenih na me\u0111usajamski pristup podacima. U verzijama Chrome-a za desktop   <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=48956#isolation\">odeljenje<\/a><\/noindex> obrtnika prema domeni, a ne kartici, implementirano je po\u010dev\u0161i od <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=48682\">Chrome 67<\/a><\/noindex>. U  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51468\">Chrome 77<\/a><\/noindex> sli\u010dan mod je aktiviran i za Android platformu.<br \/>\n<center><noindex><a rel=\"nofollow\" href=\"https:\/\/4.bp.blogspot.com\/-IGhYKMvLVKQ\/W0Yon_eYgdI\/AAAAAAAAAno\/cI9D5591oLUJD-8SQBpVW5dyPPBmU1eiACLcBGAs\/s1600\/Security%2BBlog%2BPost_%2BMitigating%2BSpectre%2Bwith%2BSite%2BIsolation%2Bin%2BChrome%2B%2528cropped%2529.png\"><img decoding=\"async\" alt=\"Ja\u010danje izolacije izme\u0111u web stranica u Chromeu\" src=\"\/wp-content\/uploads\/2019\/10\/0363b01a9ce829858420a62a25f52bb2.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p> Kako bi se smanjila prekomjerna potro\u0161nja resursa, mod me\u0111usajamske izolacije na Androidu se uklju\u010duje samo ako je na stranici zabilje\u017een ulaz putem lozinke. Chrome zapamti \u010dinjenicu da je kori\u0161tena lozinka i uklju\u010duje za\u0161titu za sve daljnje pristupe sajtu. Za\u0161tita se tako\u0111er odmah primjenjuje za prethodno definiranu listu sajtova koji su popularni me\u0111u korisnicima mobilnih ure\u0111aja. Izborna metoda aktivacije i dodane optimizacije omogu\u0107ili su zadr\u017eavanje pove\u0107anja potro\u0161nje memorije zbog rasta broja aktivnih procesa na prosje\u010dnom nivou od 3-5%, umjesto 10-13% koji su zabilje\u017eeni pri aktiviranju izolacije za sve sajtove.<\/p>\n<p>Novi na\u010din izolacije aktiviran je za 99% korisnika Chrome 77 na Android ure\u0111ajima, koji imaju najmanje 2 GB RAM-a (za 1% korisnika na\u010din je ostao isklju\u010den radi pra\u0107enja performansi). Ru\u010dno uklju\u010divanje ili isklju\u010divanje na\u010dina izolacije stranica mogu\u0107e je kroz postavku &#171;chrome:\/\/flags\/#enable-site-per-process&#187;.<\/p>\n<p>U verziji Chrome za stolna ra\u010dunala, prethodno spomenuti na\u010din izolacije web stranica je dodatno pobolj\u0161an kako bi se suprotstavio napadima koji su usmjereni na potpunu kompromitaciju procesa s obradom sadr\u017eaja. Pobolj\u0161ani na\u010din izolacije omogu\u0107it \u0107e za\u0161titu podataka web stranica od dva dodatna tipa prijetnji: curenja podataka uslijed napada putem vanjskih kanala, poput Spectre, i curenja nakon potpune kompromitacije procesa-obra\u0111iva\u010da kada do\u0111e do uspje\u0161ne eksploatacije ranjivosti koje omogu\u0107uju preuzimanje kontrole nad procesom, ali nisu dovoljne za zaobila\u017eenje sandbox-izolacije. U Chromeu za Android sli\u010dna za\u0161tita bit \u0107e dodana kasnije. <\/p>\n<p>Su\u0161tina metode je da upravlja\u010dki proces pamti kojem web mjestu radni proces ima pristup i zabranjuje pristup drugim web mjestima, \u010dak i ako napada\u010d preuzme kontrolu nad procesom i poku\u0161a do\u0107i do resursa drugog web mjesta. Ograni\u010denja obuhva\u0107aju resurse povezane s autentifikacijom (spremane lozinke i kola\u010di\u0107e), podatke koji se preuzimaju izravno putem mre\u017ee (filtriraju se i vezuju uz trenutno web mjesto HTML, XML, JSON, PDF i druge tipove datoteka), podatke u unutarnjim skladi\u0161tima (localStorage), ovlastima (odobrene dozvole web mjestu za pristup mikrofonu itd.) i porukama koje se \u0161alju putem API-ja postMessage i BroadcastChannel. Svi takvi resursi vezani su oznakom uz izvorno web mjesto i provjeravaju se s strane upravlja\u010dkog procesa za mogu\u0107nost prijenosa na zahtjev iz radnog procesa.<\/p>\n<p>Od doga\u0111aja povezanih s Chromeom tako\u0111er se mo\u017ee istaknuti  <noindex><a rel=\"nofollow\" href=\"https:\/\/groups.google.com\/a\/chromium.org\/forum\/#!msg\/blink-dev\/zlLSxQ9BA8Y\/uw9HcwIVDQAJ\">po\u010detak<\/a><\/noindex> izjava o podr\u0161ci u Chromeu za funkciju <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50156\">Scroll-To-Text<\/a><\/noindex>, koja omogu\u0107ava kreiranje linkova na pojedine rije\u010di ili fraze, bez jasnog navo\u0111enja oznaka u dokumentu putem taga &#171;a name&#187; ili svojstva &#171;id&#187;. Sintaksa takvih linkova planira se usvojiti kao web-standard, koji je trenutno u fazi <noindex><a rel=\"nofollow\" href=\"https:\/\/wicg.github.io\/ScrollToTextFragment\/\">nacrta<\/a><\/noindex>. Maske za prijelaz (u su\u0161tini, izvr\u0161ava se pretra\u017eivanje s pomicanjem) odvajaju se od obi\u010dnog sidra oznakom &#171;:~:&#187;. Na primjer, otvaranjem linka &#171;https:\/\/opennet.ru\/51702\/#:~:text=Chrom\u0435&#187; stranica \u0107e se pomaknuti na poziciju s prvim spominjanjem rije\u010di &#171;Chrom\u0435&#187; i ta rije\u010d \u0107e biti ozna\u010dena. Mogu\u0107nost je dodana u granu <noindex><a rel=\"nofollow\" href=\"https:\/\/www.google.com\/chrome\/canary\/\">Canary<\/a><\/noindex>, ali za uklju\u010divanje zahtijeva pokretanje s oznakom &#171;&#8212;enable-blink-features=TextFragmentIdentifiers&#187;.<\/p>\n<p>Druga zanimljiva predstoje\u0107a promjena u Chromeu <noindex><a rel=\"nofollow\" href=\"https:\/\/groups.google.com\/a\/chromium.org\/forum\/#!topic\/blink-dev\/sotCDcI-E7Y\">je postao<\/a><\/noindex> mogu\u0107nost zamrzavanja neaktivnih kartica, \u0161to omogu\u0107uje automatsko isklju\u010divanje iz memorije kartica koje su u pozadini vi\u0161e od 5 minuta i ne izvode zna\u010dajne radnje. Odluka o pogodnosti odre\u0111ene kartice za zamrzavanje donosi se na osnovu heuristike. Izmjena je dodana u granu Canary, na osnovu koje \u0107e biti formirano izdanje Chrome 79, i uklju\u010duje se putem oznake &#171;chrome:\/\/flags\/#proactive-tab-freeze&#187;.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Izvor: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51702\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0438 \u0432 Chrome \u0440\u0435\u0436\u0438\u043c\u0430 \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0441 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u0445. \u0420\u0435\u0436\u0438\u043c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0430\u0439\u0442\u043e\u0432 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043e\u0442 \u0430\u0442\u0430\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u0431\u043b\u043e\u043a\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a iframe-\u0432\u0441\u0442\u0430\u0432\u043a\u0438, \u0438\u043b\u0438 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u0435 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u0431\u043b\u043e\u043a\u043e\u0432 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29290,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-39042","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0438 \u0432 Chrome \u0440\u0435\u0436\u0438\u043c\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hr\/blog\/news\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"hr_HR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u0441\u0438\u043b\u0435\u043d\u0438\u0435 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u0441\u0430\u0439\u0442\u0430\u043c\u0438 \u0432 Chrome | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0438 \u0432 Chrome \u0440\u0435\u0436\u0438\u043c\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hr\/blog\/news\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:27:33+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:27:33+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Poja\u010danje izolacije izme\u0111u web stranica u Chromeu | ProHoster","description":"Tvrtka Google najavila je poja\u010davanje na\u010dina rada u Chromeu","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0441\u0438\u043b\u0435\u043d\u0438\u0435 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u0441\u0430\u0439\u0442\u0430\u043c\u0438 \u0432 Chrome | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0438 \u0432 Chrome \u0440\u0435\u0436\u0438\u043c\u0430","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:27:33+00:00","article:modified_time":"2019-10-31T19:27:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"39042","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 00:31:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:58:37","updated":"2026-01-24 00:31:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/39042","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=39042"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/39042\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/29290"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=39042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=39042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=39042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}