{"id":73649,"date":"2020-03-11T08:42:27","date_gmt":"2020-03-11T05:42:27","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-firefox-74"},"modified":"2020-03-11T08:42:27","modified_gmt":"2020-03-11T05:42:27","slug":"reliz-firefox-74","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-firefox-74","title":{"rendered":"Firefox 74 kiad\u00e1s","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Megjelent a web b\u00f6ng\u00e9sz\u0151 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mozilla.org\/en-US\/firefox\/74.0\/releasenotes\/\">Firefox 74-ben<\/a><\/noindex>, valamint <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mozilla.org\/en-US\/mobile\/68.6.0\/releasenotes\/\">mobil verzi\u00f3<\/a><\/noindex> Firefox 68.6 Android platformhoz. Ezenk\u00edv\u00fcl friss\u00edt\u00e9s k\u00e9sz\u00fclt <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mozilla.org\/en-US\/firefox\/organizations\/all\/\">\u00e1g<\/a><\/noindex> hossz\u00fa t\u00e1v\u00fa t\u00e1mogat\u00e1ssal  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mozilla.org\/en-US\/firefox\/68.6.0\/releasenotes\/\">68.6.0<\/a><\/noindex>. Hamarosan szakaszra l\u00e9p <noindex><a rel=\"nofollow\" href=\"https:\/\/firefox.com\/channel\">b\u00e9ta tesztel\u00e9s<\/a><\/noindex> a Firefox 75 \u00e1gra, amelynek kiad\u00e1sa \u00e1prilis 7-re van tervezve (projek <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51505\">\u00e1tment<\/a><\/noindex> 4-5 hetes <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51505\">fejleszt\u00e9si ciklusra<\/a><\/noindex>). A Firefox 75 b\u00e9t\u00e1ja <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=1441922\">megkezd\u0151d\u00f6tt<\/a><\/noindex> k\u00e9pz\u00e9s <noindex><a rel=\"nofollow\" href=\"https:\/\/flathub.org\/beta-repo\/appstream\/org.mozilla.firefox.flatpakref\">csomagok<\/a><\/noindex> Linuxra Flatpak form\u00e1tumban.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.mozilla.org\/en-US\/firefox\/74.0\/releasenotes\/\">F\u0151<\/a><\/noindex> <noindex><a rel=\"nofollow\" href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Mozilla\/Firefox\/Releases\/74\">\u00fajdons\u00e1gok<\/a><\/noindex>:<\/p>\n<ul>\n<li class=\"l\"> A Linux verzi\u00f3kban egy izol\u00e1ci\u00f3s mechanizmus van alkalmazva <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52440\">RLBox<\/a><\/noindex>, amely a harmadik f\u00e9lt\u0151l sz\u00e1rmaz\u00f3 f\u00fcggv\u00e9nyk\u00f6nyvt\u00e1rak sebezhet\u0151s\u00e9geinek kihaszn\u00e1l\u00e1s\u00e1nak blokkol\u00e1s\u00e1ra ir\u00e1nyul. Jelenleg az elszigetel\u00e9s csak a k\u00f6nyvt\u00e1r eset\u00e9ben akt\u00edv. <noindex><a rel=\"nofollow\" href=\"http:\/\/scripts.sil.org\/cms\/scripts\/page.php?site_id=projects&#038;item_id=graphite_home\">Graphite<\/a><\/noindex>, amely a bet\u0171k megjelen\u00edt\u00e9s\u00e9\u00e9rt felel\u0151s. A RLBox a C\/C++ k\u00f3d leford\u00edt\u00e1s\u00e1t v\u00e9gzi egy elk\u00fcl\u00f6n\u00edtett k\u00f6nyvt\u00e1rb\u00f3l alacsony szint\u0171 WebAssembly k\u00f6ztes k\u00f3dra, amelyet ezut\u00e1n WebAssembly modul form\u00e1j\u00e1ba csomagolnak, \u00e9s a hat\u00e1sk\u00f6r\u00f6k csak ehhez a modulhoz vannak k\u00f6tve. Az \u00f6sszegy\u0171jt\u00f6tt modul egy k\u00fcl\u00f6n mem\u00f3riater\u00fcleten m\u0171k\u00f6dik, \u00e9s nincs hozz\u00e1f\u00e9r\u00e9se a t\u00f6bbi c\u00edmz\u00e9si t\u00e9rhez. Ha a k\u00f6nyvt\u00e1rban sebezhet\u0151s\u00e9get haszn\u00e1lnak ki, a t\u00e1mad\u00f3 korl\u00e1tozott lesz, \u00e9s nem tud hozz\u00e1f\u00e9rni a f\u0151 folyamat mem\u00f3riater\u00fcleteihez, vagy \u00e1tadni az ir\u00e1ny\u00edt\u00e1st az elk\u00fcl\u00f6n\u00edtett k\u00f6rnyezetb\u0151l.\n<li class=\"l\"> A DNS HTTPS-en kereszt\u00fcli futtat\u00e1sa (DoH, DNS over HTTPS) <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=47215\">alap\u00e9rtelmezetten be van kapcsolva<\/a><\/noindex> az Egyes\u00fclt \u00c1llamokbeli felhaszn\u00e1l\u00f3k sz\u00e1m\u00e1ra. Alap\u00e9rtelmezett DNS-szolg\u00e1ltat\u00f3k\u00e9nt a CloudFlare (mozilla.cloudflare-dns.com) van megadva <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=1593176\">be van jegyezve<\/a><\/noindex> be. <noindex><a rel=\"nofollow\" href=\"https:\/\/isitblockedinrussia.com\/?host=mozilla.cloudflare-dns.com\">a blokkol\u00e1si list\u00e1kba<\/a><\/noindex> Roszkomnadzor \u00e1ltal), m\u00edg opcion\u00e1lisan el\u00e9rhet\u0151 a NextDNS. A szolg\u00e1ltat\u00f3 megv\u00e1ltoztat\u00e1sa vagy a DoH enged\u00e9lyez\u00e9se az Egyes\u00fclt \u00c1llamokon k\u00edv\u00fcl <noindex><a rel=\"nofollow\" href=\"https:\/\/support.mozilla.org\/en-US\/kb\/firefox-dns-over-https\">lehet\u0151v\u00e9 teszi<\/a><\/noindex> a h\u00e1l\u00f3zati kapcsolat be\u00e1ll\u00edt\u00e1saiban. A DoH-r\u00f3l a Firefoxban egy <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52427\">k\u00fcl\u00f6n bejegyz\u00e9sben olvashat.<\/a><\/noindex>.\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/pics_base\/0_1581435648.png\"><img decoding=\"async\" alt=\"Firefox 74 kiad\u00e1s\" src=\"\/wp-content\/uploads\/2020\/03\/d05de0ef0a8c32d351fbc3a31085fd75.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51586\">Kikapcsolva<\/a><\/noindex> a TLS 1.0 \u00e9s TLS 1.1 protokollok t\u00e1mogat\u00e1sa. Azok sz\u00e1m\u00e1ra, akik v\u00e9dett csatorn\u00e1n kereszt\u00fcl k\u00edv\u00e1nj\u00e1k el\u00e9rni a weboldalakat, a szervernek legal\u00e1bb a TLS 1.2 t\u00e1mogat\u00e1s\u00e1t kell biztos\u00edtania. A Google adatai szerint jelenleg k\u00f6r\u00fclbel\u00fcl 0,5%-a a weboldalak bet\u00f6lt\u00e9s\u00e9nek r\u00e9gi TLS verzi\u00f3k haszn\u00e1lat\u00e1val t\u00f6rt\u00e9nik. A letilt\u00e1s a k\u00f6vetkez\u0151 szerint t\u00f6rt\u00e9nt: <noindex><a rel=\"nofollow\" href=\"https:\/\/datatracker.ietf.org\/doc\/draft-ietf-tls-oldversions-deprecate\/\">aj\u00e1nl\u00e1sok<\/a><\/noindex>  IETF (Internet Engineering Task Force). A TLS 1.0\/1.1 t\u00e1mogat\u00e1s\u00e1nak le\u00e1ll\u00edt\u00e1s\u00e1nak oka a modern titkos\u00edt\u00e1sok (p\u00e9ld\u00e1ul ECDHE \u00e9s AEAD) hi\u00e1nya, valamint a r\u00e9gi titkos\u00edt\u00e1sok t\u00e1mogat\u00e1s\u00e1nak k\u00f6vetelm\u00e9nye, amelyek megb\u00edzhat\u00f3s\u00e1ga a sz\u00e1m\u00edt\u00e1stechnika modern fejl\u0151d\u00e9s\u00e9nek szakasz\u00e1ban megk\u00e9rd\u0151jelezhet\u0151 (p\u00e9ld\u00e1ul a TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA t\u00e1mogat\u00e1sa sz\u00fcks\u00e9ges, az integrit\u00e1s \u00e9s az autentik\u00e1l\u00e1s ellen\u0151rz\u00e9s\u00e9re pedig MD5 \u00e9s SHA-1 haszn\u00e1lata sz\u00fcks\u00e9ges). A TLS 1.0 \u00e9s TLS 1.1 haszn\u00e1lata eset\u00e9n a Firefox 74-t\u0151l kezd\u0151d\u0151en hiba\u00fczenet jelenik meg. A r\u00e9gi TLS verzi\u00f3kkal val\u00f3 munka lehet\u0151s\u00e9ge vissza\u00e1ll\u00edthat\u00f3 a security.tls.version.enable-deprecated = true be\u00e1ll\u00edt\u00e1ssal vagy a hiba\u00fczenetet megjelen\u00edt\u0151 oldalon tal\u00e1lhat\u00f3 gomb seg\u00edts\u00e9g\u00e9vel, amikor egy r\u00e9gi protokollal rendelkez\u0151 weboldalra l\u00e1togatunk.<br \/>\n<center><noindex><a rel=\"nofollow\" href=\"https:\/\/hacks.mozilla.org\/files\/2020\/03\/secure-connection-failed.png\"><img decoding=\"async\" alt=\"Firefox 74 kiad\u00e1s\" src=\"\/wp-content\/uploads\/2020\/03\/262b6490bdb1f5e70882a3ec92347abc.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<li class=\"l\"> A kiad\u00e1si megjegyz\u00e9sben aj\u00e1nlott egy kieg\u00e9sz\u00edt\u0151 <noindex><a rel=\"nofollow\" href=\"https:\/\/addons.mozilla.org\/en-US\/firefox\/addon\/facebook-container\/\">Facebook Container<\/a><\/noindex>, amely automatikusan blokkolja a harmadik f\u00e9lt\u0151l sz\u00e1rmaz\u00f3 weboldalakon elhelyezett Facebook widgeteket, amelyeket az azonos\u00edt\u00e1shoz, hozz\u00e1sz\u00f3l\u00e1sok k\u00fcld\u00e9s\u00e9hez \u00e9s l\u00e1jkol\u00e1shoz haszn\u00e1lnak. A Facebook azonos\u00edt\u00f3 param\u00e9terei egy k\u00fcl\u00f6n tart\u00e1lyban vannak elszigetelve, megnehez\u00edtve a felhaszn\u00e1l\u00f3 azonos\u00edt\u00e1s\u00e1t az megl\u00e1togatott weboldalakkal. A f\u0151 Facebook weboldallal val\u00f3 munka lehet\u0151s\u00e9ge megmarad, de annak izol\u00e1ci\u00f3ja az egy\u00e9b weboldalakt\u00f3l megt\u00f6rt\u00e9nik.\n<p>Rugalmasabb izol\u00e1ci\u00f3 \u00e9rdek\u00e9ben javasolt egy kieg\u00e9sz\u00edt\u0151 <noindex><a rel=\"nofollow\" href=\"https:\/\/support.mozilla.org\/en-US\/kb\/containers\">Multi-Account Containers<\/a><\/noindex> a kontextu\u00e1lis t\u00e1rol\u00f3k megval\u00f3s\u00edt\u00e1s\u00e1val. A t\u00e1rol\u00f3k lehet\u0151s\u00e9get biztos\u00edtanak k\u00fcl\u00f6nb\u00f6z\u0151 t\u00edpus\u00fa tartalmak elszigetel\u00e9s\u00e9re an\u00e9lk\u00fcl, hogy k\u00fcl\u00f6n profilokat kellene l\u00e9trehozni, \u00edgy lehet\u0151v\u00e9 t\u00e9ve a k\u00fcl\u00f6nb\u00f6z\u0151 oldalcsoportok inform\u00e1ci\u00f3inak elk\u00fcl\u00f6n\u00edt\u00e9s\u00e9t. P\u00e9ld\u00e1ul l\u00e9trehozhat\u00f3k elk\u00fcl\u00f6n\u00edtett, egym\u00e1st\u00f3l f\u00fcggetlen ter\u00fcletek a szem\u00e9lyes kommunik\u00e1ci\u00f3, munka, v\u00e1s\u00e1rl\u00e1s \u00e9s banki tranzakci\u00f3k sz\u00e1m\u00e1ra, vagy lehet\u0151v\u00e9 tehet\u0151 a felhaszn\u00e1l\u00f3 k\u00fcl\u00f6nb\u00f6z\u0151 fi\u00f3kjainak egyidej\u0171 haszn\u00e1lata egy webhelyen. Minden t\u00e1rol\u00f3ban k\u00fcl\u00f6n t\u00e1rol\u00f3k haszn\u00e1latosak a s\u00fctik, Local Storage API, indexedDB, gyors\u00edt\u00f3t\u00e1r \u00e9s a OriginAttributes tartalm\u00e1hoz.<\/p>\n<li class=\"l\"> Az about:config-ben hozz\u00e1adott\u00e1k a &#171;browser.tabs.allowTabDetach&#187; be\u00e1ll\u00edt\u00e1st, amely lehet\u0151v\u00e9 teszi a lapok \u00faj ablakba val\u00f3 lev\u00e1laszt\u00e1s\u00e1nak tilalm\u00e1t. A lapok v\u00e9letlenszer\u0171 lev\u00e1laszt\u00e1sa a Firefox egyik legzavar\u00f3bb hib\u00e1ja, amelyet \u00e9rdemes jav\u00edtani. <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=616130\">9 \u00e9ven \u00e1t k\u00f6vetelt\u00e9k.<\/a><\/noindex> 9 \u00e9ve folyamatban van. A b\u00f6ng\u00e9sz\u0151 lehet\u0151v\u00e9 teszi, hogy az eg\u00e9rrel \u00e1th\u00fazzuk a f\u00fclet egy \u00faj ablakba, de egy bizonyos k\u00f6r\u00fclm\u00e9ny eset\u00e9n a f\u00fcl lev\u00e1laszt\u00f3dik egy k\u00fcl\u00f6n ablakba, \u00e9s a munka k\u00f6zben, ha nem figyel\u00fcnk az eg\u00e9rmozg\u00e1sra kattint\u00e1skor a f\u00fcl\u00f6n.\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51793\">Megsz\u00fcntetve<\/a><\/noindex> kieg\u00e9sz\u00edt\u0151k t\u00e1mogat\u00e1sa, amelyeket mell\u00e9k\u00faton lehet telep\u00edteni, \u00e9s nem felhaszn\u00e1l\u00f3i profilokhoz kapcsol\u00f3dnak. A v\u00e1ltoz\u00e1s csak a k\u00f6z\u00f6s k\u00f6nyvt\u00e1rakban (i.e. \/usr\/lib\/mozilla\/extensions\/, \/usr\/share\/mozilla\/extensions\/ vagy ~\/ .mozilla\/extensions\/) telep\u00edtett kieg\u00e9sz\u00edt\u0151k telep\u00edt\u00e9s\u00e9t \u00e9rinti, amelyeket a Firefox minden p\u00e9ld\u00e1nya kezel a rendszeren bel\u00fcl (felhaszn\u00e1l\u00f3hoz nem k\u00f6t\u0151d\u0151en). Ez a m\u00f3dszer \u00e1ltal\u00e1ban a kieg\u00e9sz\u00edt\u0151k el\u0151telep\u00edt\u00e9s\u00e9re vonatkoz\u00f3 disztrib\u00faci\u00f3kban, nemk\u00edv\u00e1natos besz\u00far\u00e1sra harmadik f\u00e9lt\u0151l sz\u00e1rmaz\u00f3 alkalmaz\u00e1sokkal egy\u00fctt, k\u00e1ros kieg\u00e9sz\u00edt\u0151k integr\u00e1l\u00e1s\u00e1ra vagy egy k\u00fcl\u00f6n\u00e1ll\u00f3 kieg\u00e9sz\u00edt\u0151 sz\u00e1ll\u00edt\u00e1s\u00e1ra a saj\u00e1t telep\u00edt\u0151j\u00e9vel alkalmazand\u00f3. A Firefox 73-ban a kor\u00e1bban k\u00f6telez\u0151en telep\u00edtett kieg\u00e9sz\u00edt\u0151k automatikusan \u00e1thelyez\u00e9sre ker\u00fcltek a k\u00f6z\u00f6s k\u00f6nyvt\u00e1rb\u00f3l a felhaszn\u00e1l\u00f3k egyedi profiljaiba, \u00e9s mostant\u00f3l <noindex><a rel=\"nofollow\" href=\"https:\/\/support.mozilla.org\/kb\/disable-or-remove-add-ons\">elt\u00e1vol\u00edtottak<\/a><\/noindex> az alap\u00e9rtelmezett kieg\u00e9sz\u00edt\u0151kezel\u0151n kereszt\u00fcl \u00e9rhet\u0151k el.\n<li class=\"l\"> A b\u00f6ng\u00e9sz\u0151ben el\u00e9rhet\u0151 Lockwise rendszerb\u0151v\u00edtm\u00e9ny \u00faj &#171;about:logins&#187; fel\u00fcletet k\u00edn\u00e1l a mentett jelszavak kezel\u00e9s\u00e9re. <noindex><a rel=\"nofollow\" href=\"https:\/\/support.mozilla.org\/kb\/manage-passwords-firefox-desktop-firefox-lockwise\">Passkey<\/a><\/noindex> a sorrend megford\u00edt\u00e1s\u00e1ra (Z-t\u0151l A-ig).\n<li class=\"l\"> A WebRTC-ben n\u00f6velt\u00e9k a bels\u0151 IP-c\u00edmek sziv\u00e1rg\u00e1s\u00e1nak v\u00e9delm\u00e9t hang- \u00e9s videoh\u00edv\u00e1sok sor\u00e1n az &#171; &#187; mechanizmus seg\u00edts\u00e9g\u00e9vel, amely<noindex><a rel=\"nofollow\" href=\"https:\/\/tools.ietf.org\/html\/draft-mdns-ice-candidates-00\">mDNS ICE<\/a><\/noindex>&#171; elrejti a helyi c\u00edmet egy dinamikusan gener\u00e1lt v\u00e9letlenszer\u0171 azonos\u00edt\u00f3 m\u00f6g\u00f6tt, amelyet a Multicast DNS hat\u00e1roz meg.\n<li class=\"l\"> Megv\u00e1ltozott a &#171;k\u00e9p a k\u00e9pen&#187; n\u00e9zetv\u00e1lt\u00f3 gomb helyzete, ami lefedte a k\u00f6vetkez\u0151 k\u00e9pre val\u00f3 \u00e1tmenet gombot az Instagram f\u00e9nyk\u00e9pek csoportos let\u00f6lt\u00e9s\u00e9nek fel\u00fclet\u00e9n.\n<li class=\"l\"> JavaScript-ben <noindex><a rel=\"nofollow\" href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/JavaScript\/Reference\/Operators\/Optional_chaining\">hozz\u00e1adva<\/a><\/noindex>  a &#171;?.&#187; oper\u00e1tor, amely lehet\u0151v\u00e9 teszi az \u00f6sszes tulajdons\u00e1g vagy h\u00edv\u00e1s egyidej\u0171 ellen\u0151rz\u00e9s\u00e9t. P\u00e9ld\u00e1ul a &#171;db?.user?.name?.length&#187; megad\u00e1s\u00e1val mostant\u00f3l hozz\u00e1f\u00e9rhet\u00fcnk a &#171;db.user.name.length&#187; \u00e9rt\u00e9k\u00e9hez el\u0151zetes ellen\u0151rz\u00e9sek n\u00e9lk\u00fcl. Ha b\u00e1rmely elem null vagy undefined \u00e9rt\u00e9ket kap, az kimenet &#171;undefined&#187; \u00e9rt\u00e9ket ad.\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=1565170\">Megsz\u00fcntetve<\/a><\/noindex> A Object.toSource() m\u00f3dszer \u00e9s a glob\u00e1lis uneval() funkci\u00f3 t\u00e1mogat\u00e1sa a weboldalakon \u00e9s b\u0151v\u00edtm\u00e9nyekben.\n<li class=\"l\"> \u00daj esem\u00e9ny hozz\u00e1adva <noindex><a rel=\"nofollow\" href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/WorkerGlobalScope\/languagechange_event\">languagechange_even<\/a><\/noindex> \u00e9s a hozz\u00e1 tartoz\u00f3 tulajdons\u00e1g <noindex><a rel=\"nofollow\" href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/WorkerGlobalScope\/onlanguagechange\">onlanguagechange<\/a><\/noindex>, amelyek lehet\u0151v\u00e9 teszik a kezel\u0151 h\u00edv\u00e1s\u00e1t, amikor a felhaszn\u00e1l\u00f3 v\u00e1lt a felhaszn\u00e1l\u00f3i fel\u00fclet nyelv\u00e9n.\n<li class=\"l\"> Enged\u00e9lyezve van a HTTP fejl\u00e9c feldolgoz\u00e1sa  <noindex><a rel=\"nofollow\" href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/Headers\/Cross-Origin-Resource-Policy\">Kereszt-Orig\u00f3-Forr\u00e1s-Politika<\/a><\/noindex> (<noindex><a rel=\"nofollow\" href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/Cross-Origin_Resource_Policy_(CORP)\">CORP<\/a><\/noindex>), amely lehet\u0151v\u00e9 teszi a webhelyek sz\u00e1m\u00e1ra, hogy megakad\u00e1lyozz\u00e1k a k\u00fcls\u0151 domainekb\u0151l (cross-origin \u00e9s cross-site) sz\u00e1rmaz\u00f3 er\u0151forr\u00e1sok (p\u00e9ld\u00e1ul k\u00e9pek \u00e9s szkriptek) beilleszt\u00e9s\u00e9t. A fejl\u00e9c k\u00e9t \u00e9rt\u00e9ket vehet fel: &#171;same-origin&#187; (csak a ugyanazon s\u00e9m\u00e1val, hosztn\u00e9vvel \u00e9s portsz\u00e1mmal rendelkez\u0151 er\u0151forr\u00e1sok lek\u00e9rdez\u00e9seket enged\u00e9lyezi) \u00e9s &#171;same-site&#187; (csak az ugyanarr\u00f3l a webhelyr\u0151l sz\u00e1rmaz\u00f3 lek\u00e9rdez\u00e9seket enged\u00e9lyezi).\n<p>   Cross-Origin-Resource-Policy: same-site<\/p>\n<li class=\"l\"> Alap\u00e9rtelmez\u00e9s szerint enged\u00e9lyezve van a HTTP fejl\u00e9c <noindex><a rel=\"nofollow\" href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/Feature_Policy\">Feature-Policy<\/a><\/noindex>, amely lehet\u0151v\u00e9 teszi az API viselked\u00e9s\u00e9nek kezel\u00e9s\u00e9t \u00e9s bizonyos k\u00e9pess\u00e9gek enged\u00e9lyez\u00e9s\u00e9t (p\u00e9ld\u00e1ul letilthat\u00f3 a Geolocation API, a kamera, a mikrofon, a teljes k\u00e9perny\u0151s \u00e1tmenet, az automatikus lej\u00e1tsz\u00e1s, az encrypted-media, az anim\u00e1ci\u00f3k, a Payment API, az XMLHttpRequest szinkron m\u00f3dban stb.). Az iframe blokkokhoz k\u00fcl\u00f6n attrib\u00fatumot javasoltak &#171;<noindex><a rel=\"nofollow\" href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTML\/Element\/iframe#attr-allow\">allow<\/a><\/noindex>&#171;, amely a weboldal k\u00f3dj\u00e1ban haszn\u00e1lhat\u00f3 bizonyos iframe blokkok jogainak megad\u00e1s\u00e1ra.\n<p>   &lt;iframe src=&#187;https:\/\/example.com&#187; allow=&#187;fullscreen&#187;&gt;&lt;\/iframe&gt;<\/p>\n<p>   Feature-Policy: mikrofon &#8216;none&#8217;; geolocation &#8216;none&#8217;<\/p>\n<p>Ha a weboldal az &#171;allow&#187; attrib\u00fatumon kereszt\u00fcl enged\u00e9lyezi az er\u0151forr\u00e1sokkal val\u00f3 munk\u00e1t egy adott iframe r\u00e9v\u00e9n, \u00e9s egy iframe-b\u0151l \u00e9rkezik a k\u00e9r\u00e9s az er\u0151forr\u00e1s m\u0171k\u00f6d\u00e9s\u00e9nek enged\u00e9lyez\u00e9s\u00e9re, a b\u00f6ng\u00e9sz\u0151 mostant\u00f3l a f\u0151oldal kontextus\u00e1ban jelen\u00edti meg az enged\u00e9lyez\u00e9si p\u00e1rbesz\u00e9dpanelt, \u00e9s a felhaszn\u00e1l\u00f3 \u00e1ltal meger\u0151s\u00edtett jogokat deleg\u00e1lja az iframe-be (ahelyett, hogy k\u00fcl\u00f6n meger\u0151s\u00edt\u00e9st k\u00e9rne az iframe-t\u0151l \u00e9s a f\u0151oldalt\u00f3l). Ha azonban a f\u0151oldalnak nincs jogosults\u00e1ga az allow attrib\u00fatumon kereszt\u00fcl k\u00e9rt er\u0151forr\u00e1shoz, az iframe hozz\u00e1f\u00e9r\u00e9se az er\u0151forr\u00e1shoz azonnal megtagad\u00e1sra ker\u00fcl. <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=1483631\">a k\u00fclf\u00f6ldi forgalmat, mik\u00f6zben mindenhol meg\u00e1ll az \u00e9let.<\/a><\/noindex>, a felhaszn\u00e1l\u00f3i p\u00e1rbesz\u00e9dpanel megjelen\u00edt\u00e9se n\u00e9lk\u00fcl.<\/p>\n<li class=\"l\"> Alap\u00e9rtelmez\u00e9s szerint enged\u00e9lyezve van a CSS tulajdons\u00e1g &#8216;<noindex><a rel=\"nofollow\" href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/CSS\/text-underline-position\">text-underline-position<\/a><\/noindex>&#8216;, amely meghat\u00e1rozza a sz\u00f6veg al\u00e1h\u00faz\u00e1s\u00e1nak poz\u00edci\u00f3j\u00e1t (p\u00e9ld\u00e1ul f\u00fcgg\u0151leges sz\u00f6veg megjelen\u00edt\u00e9se eset\u00e9n lehet\u0151s\u00e9g van az al\u00e1h\u00faz\u00e1s bal vagy jobb oldalra helyez\u00e9s\u00e9re, m\u00edg v\u00edzszintes elrendez\u00e9sn\u00e9l nemcsak alul, hanem fel\u00fcl is lehets\u00e9ges). Tov\u00e1bb\u00e1 az al\u00e1h\u00faz\u00e1s st\u00edlus\u00e1t vez\u00e9rl\u0151 CSS tulajdons\u00e1gokban  <noindex><a rel=\"nofollow\" href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/CSS\/text-underline-offset\">text-underline-offset<\/a><\/noindex> \u00e9s <noindex><a rel=\"nofollow\" href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/CSS\/text-decoration-thickness\">text-decoration-thickness<\/a><\/noindex> hozz\u00e1adva a sz\u00e1zal\u00e9kos \u00e9rt\u00e9kek haszn\u00e1lat\u00e1nak t\u00e1mogat\u00e1sa.\n<li class=\"l\"> A CSS-tulajdons\u00e1gokban <noindex><a rel=\"nofollow\" href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/CSS\/outline-style\">outline-style<\/a><\/noindex>, amely meghat\u00e1rozza az elemek k\u00f6r\u00fcli vonal st\u00edlus\u00e1t, alap\u00e9rtelmez\u00e9s szerint enged\u00e9lyezve van az &#171;auto&#187; \u00e9rt\u00e9k haszn\u00e1lata (kor\u00e1bban <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=1031664\">ki van kapcsolva<\/a><\/noindex> a GNOME probl\u00e9m\u00e1i miatt).\n<li class=\"l\"> A JavaScript debuggerben <noindex><a rel=\"nofollow\" href=\"https:\/\/hacks.mozilla.org\/2020\/03\/security-means-more-with-firefox-74-2\/\">hozz\u00e1adva lett<\/a><\/noindex> A be\u00e1gyazott Web Worker-ek hibakeres\u00e9s\u00e9nek lehet\u0151s\u00e9ge, amelyek fut\u00e1sa sz\u00fcneteltethet\u0151 \u00e9s l\u00e9p\u00e9sr\u0151l l\u00e9p\u00e9sre hibakereshet\u0151 megszak\u00edt\u00e1si pontok alkalmaz\u00e1s\u00e1val.\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/hacks.mozilla.org\/files\/2020\/03\/debugger-nested-worker.png\"><img decoding=\"async\" alt=\"Firefox 74 kiad\u00e1s\" src=\"\/wp-content\/uploads\/2020\/03\/e7aca227581a33cf543e01fc38ef7163.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<li class=\"l\"> A weboldalak vizsg\u00e1lat\u00e1hoz biztos\u00edtott fel\u00fcleten figyelmeztet\u00e9sek jelennek meg a CSS-tulajdons\u00e1gokhoz, amelyek a z-index, top, left, bottom \u00e9s right pozicion\u00e1l\u00f3 elemekb\u0151l f\u00fcggenek.<br \/>\n<center><noindex><a rel=\"nofollow\" href=\"https:\/\/hacks.mozilla.org\/files\/2020\/03\/inactive-css-positioning.png\"><img decoding=\"async\" alt=\"Firefox 74 kiad\u00e1s\" src=\"\/wp-content\/uploads\/2020\/03\/ab2edbb7d5bbbe54e26d30736e89c41a.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<li class=\"l\"> Windows \u00e9s macOS rendszerekhez megval\u00f3s\u00edtott\u00e1k a Microsoft Edge Chromium motorra \u00e9p\u00fcl\u0151 b\u00f6ng\u00e9sz\u0151b\u0151l t\u00f6rt\u00e9n\u0151 profilimport\u00e1l\u00e1s lehet\u0151s\u00e9g\u00e9t.\n<\/ul>\n<p>A Firefox 74-ben \u00faj lehet\u0151s\u00e9gek \u00e9s hibajav\u00edt\u00e1sok mellett <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mozilla.org\/security\/known-vulnerabilities\/firefox.html#firefox74\">20 sebezhet\u0151s\u00e9get<\/a><\/noindex>, ebb\u0151l 10 (\u00d6sszegy\u0171jtve: <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.mozilla.org\/buglist.cgi?bug_id=1592078%2C1604847%2C1608256%2C1612636%2C1614339\">CVE-2020-6814<\/a><\/noindex> \u00e9s <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.mozilla.org\/buglist.cgi?bug_id=1181957%2C1557732%2C1557739%2C1611457%2C1612431\">CVE-2020-6815<\/a><\/noindex>) \u00fagy van megjel\u00f6lve, mint potenci\u00e1lisan k\u00e9pes a k\u00f3d v\u00e9grehajt\u00e1s\u00e1ra az elk\u00f6vet\u0151 \u00e1ltal, speci\u00e1lisan kialak\u00edtott oldalak megnyit\u00e1sakor. Eml\u00e9keztet\u00fcnk r\u00e1, hogy a mem\u00f3ria probl\u00e9m\u00e1kat, mint p\u00e9ld\u00e1ul a buffert\u00falcsordul\u00e1sokat \u00e9s a m\u00e1r felszabad\u00edtott mem\u00f3ria ter\u00fcletekhez val\u00f3 hozz\u00e1f\u00e9r\u00e9st, most m\u00e1r vesz\u00e9lyes, de nem kritikus jelz\u00e9s\u0171k\u00e9nt oszt\u00e1lyozz\u00e1k.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Forr\u00e1s: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52513\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Firefox 74, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Firefox 68.6 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u0435\u0442\u043a\u0438 \u0441 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 68.6.0. \u0412 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u044e \u0431\u0435\u0442\u0430-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0439\u0434\u0451\u0442 \u0432\u0435\u0442\u043a\u0430 Firefox 75, \u0440\u0435\u043b\u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430\u043c\u0435\u0447\u0435\u043d \u043d\u0430 7 \u0430\u043f\u0440\u0435\u043b\u044f (\u043f\u0440\u043e\u0435\u043a\u0442 \u043f\u0435\u0440\u0435\u0448\u0451\u043b \u043d\u0430 4-5-\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438). \u0414\u043b\u044f \u0431\u0435\u0442\u0430-\u0432\u0435\u0442\u043a\u0438 Firefox 75 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0431\u043e\u0440\u043e\u043a \u0434\u043b\u044f Linux [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":73650,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-73649","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Firefox 74, \u0430 \u0442\u0430\u043a\u0436\u0435\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-firefox-74\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 Firefox 74 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Firefox 74, \u0430 \u0442\u0430\u043a\u0436\u0435\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-firefox-74\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-03-11T05:42:27+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-11T05:42:27+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Firefox 74 kiad\u00e1s | ProHoster","description":"Megjelent a Firefox 74 webb\u00f6ng\u00e9sz\u0151, valamint","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-firefox-74","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 Firefox 74 | ProHoster","og:description":"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Firefox 74, \u0430 \u0442\u0430\u043a\u0436\u0435","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-firefox-74","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-11T05:42:27+00:00","article:modified_time":"2020-03-11T05:42:27+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"73649","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:28:30","updated":"2022-10-05 17:19:32","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/73649","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=73649"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/73649\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/73650"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=73649"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=73649"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=73649"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}