Kua tukuna e Google te pūtirotiro tukutuku Chrome 90. Kei te wātea hoki he putanga pumau o te kaupapa Chromium tuwhera-pūtake, te pūtake o Chrome. Kei roto i te Chrome ngā tohu a Google, ngā whakamōhiotanga tukinga, ngā kōwae DRM (Digital Restricted Management), te tāutanga whakahōu aunoa, me te whakamahinga o te RDL (Related Search Parameters). Ko te putanga e whai ake nei, ko Chrome 91, kua whakaritea mō te 25 o Mei.
Nga huringa matua i roto i te Chrome 90:
- Ka taea e ngā kaiwhakamahi katoa te whakatuwhera i ngā paetukutuku mā te HTTPS mā te taunoa ina tāuruhia ngā ingoa manaaki ki te pae wāhitau. Hei tauira, mā te tāuru i te ingoa manaaki example.com ka whakatuwherahia te https://example.com mā te taunoa, ā, ki te puta he raruraru, ka hoki te pūtirotiro ki http://example.com. Hei whakahaere i te whakamahinga taunoa o "https://," kei te wātea te tautuhinga "chrome://flags#omnibox-default-typed-navigations-to-https".
- Kua whakatinanahia te āheinga ki te tuku tapanga rerekē ki ngā matapihi mō te wehewehe tirohanga i roto i te papaaho papamahi. Mā te tautoko mō te whakarerekē ingoa matapihi ka māmā ake te whakaritenga mahi ina whakamahia ngā matapihi tirotiro motuhake mō ngā mahi rerekē, pērā i te whakatuwheratanga o ngā matapihi motuhake mō te mahi, ngā hiahia whaiaro, ngā whakangahau, ngā ihirangi kua tiakina, me ērā atu mea. Ka taea te whakarerekē i te ingoa mā te whakamahi i te kōwhiringa "Tāpiri Ingoa Matapihi" i roto i te tahua horopaki e puta mai ana ina pāwhiri-matau i tētahi wāhi kau i roto i te pae ripa. Whai muri i te whakarerekētanga o te ingoa, ka whakaatuhia e te papaaho tono te ingoa kua tīpakohia hei utu mō te ingoa paetukutuku mai i te ripa hohe, he mea whai hua pea ina whakatuwherahia te paetukutuku kotahi i roto i ngā matapihi rerekē e hono ana ki ngā pūkete motuhake. Ka tiakina te hononga i waenga i ngā wātū, ā, i muri i te tīmatanga anō, ka whakahokia ngā matapihi me ngā ingoa kua tīpakohia.

- Kua tāpirihia te āheinga ki te huna i te Rārangi Pānui me te kore e whakarerekē i ngā tautuhinga i roto i te "chrome://flags" ("chrome://flags#read-later"). Hei huna i tēnei, ka taea e koe te whakamahi i te kōwhiringa "Whakaatu Rārangi Pānui" i raro i te tahua horopaki e whakaatuhia ana ina pāwhiri-matau koe i te pae tohuwāhi. Hei whakamaumahara, i roto i te tukunga o mua, mō ētahi kaiwhakamahi, mā te pāwhiri i te whetu i te pae wāhitau hei tāpiri atu ki te pātene "Tāpiri tohuwāhi" ka whakaatuhia hoki he pātene "Tāpiri ki te Rārangi Pānui" tuarua. I puta he tahua "Rārangi Pānui" i te kokonga matau o te pae tohuwāhi, e whakarārangi ana i ngā whārangi katoa i tāpirihia i mua. Mā te whakatuwhera i tētahi whārangi mai i te rārangi ka tohu kua pānuihia. Ka taea hoki te tohu ā-ringa i ngā whārangi o te rārangi hei pānui, kāore anō rānei kia pānuihia, ka tangohia rānei i te rārangi.
- Kua tāpirihia te tautoko mō te wehewehenga whatunga hei tiaki i ngā tikanga aroturuki whakawhiti-pae e ahu mai ana i te penapena i ngā tohu tuakiri ki ngā wāhi kāore i te whakaarohia mō te rokiroki pumau ("Ngā Pihikete Tino Pai"). Mai i te mea ka rongoahia ngā rauemi kua keterokihia ki roto i tētahi mokowā ingoa tiritahi, ahakoa te rohe taketake, ka taea e tētahi pae te kite i te utaina o ngā rauemi mai i tētahi atu pae mā te tirotiro mēnā kei roto te rauemi i te keteroki. Ko tēnei tiakitanga e ahu mai ana i te whakamahinga o te wehewehenga whatunga, e uru ana ki te tāpiri i ētahi atu mahere ki ngā keteroki tiritahi. rohe, i whakatuwheratia ai te whārangi matua, e whakawhāiti ana i te kapinga keteroki mō ngā tuhinga aroturuki ki te pae o nāianei anake (kāore e taea e te tuhinga mai i te iframe te tirotiro mēnā i utaina te rauemi mai i tētahi atu pae). Ko te utu o te wehewehenga ka whakaitihia te pai o te keteroki, ka hua ake he pikinga paku o te wā uta whārangi (mā te 1.32% te mōrahi, engari mō te 80% o ngā pae mā te 0.09-0.75%).
- Kua whakawhānuihia te rārangi pango o ngā tauranga whatunga e āraia ana ngā tono HTTP, HTTPS me FTP hei tiaki i ngā whakaekenga NAT slipstreaming, e āhei ai te whakatū hononga whatunga ina whakatuwheratia he whārangi tukutuku kua whakaritea motuhaketia i roto i te pūtirotiro e te kaiwhakaeke. tūmau te kaiwhakaeke ki tētahi tauranga UDP, TCP rānei i runga i te pūnaha a te kaiwhakamahi, ahakoa te whakamahinga o te awhe wāhitau ā-roto (192.168.xx, 10.xxx). Kua tāpirihia ngā tauranga 554 (tikanga RTSP) me te 10080 (i whakamahia i roto i te tārua Amanda me te VMWare vCenter) ki te rārangi o ngā tauranga kua āraia. I āraia i mua ngā tauranga 69, 137, 161, 554, 1719, 1720, 1723, 5060, 5061, me te 6566.
- Kua tāpirihia te tautoko tuatahi mō te whakatuwhera i ngā tuhinga PDF me ngā puka XFA i roto i te pūtirotiro.
- Mō ētahi kaiwhakamahi, kua whakahohehia he wāhanga tautuhinga hou, "Ngā Tautuhinga Chrome > Tūmataitinga me te haumarutanga > Pouaka oneone tūmataiti". Mā tēnei wāhanga ka taea e koe te whakahaere i ngā tautuhinga API FLoC, e aro ana ki te whakatau i te kāwai hiahia o te kaiwhakamahi me te kore e tautuhi takitahi, me te kore hoki e hono atu ki te hītori tirotiro a te kaiwhakamahi o ngā paetukutuku motuhake.
- Ka whakaatuhia he whakamōhiotanga e mārama ake ana me te rārangi o ngā mahi e whakaaetia ana ina hono te kaiwhakamahi ki tētahi kōtaha kua whakahohea te whakahaere pokapū mōna.
- Kua iti ake te whakararuraru o te atanga tono whakaaetanga. Ko ngā tono kāore pea e whakaaetia e te kaiwhakamahi ka āraia aunoatia, me te whakaatu i tētahi tohu e rite ana i te pae wāhitau. Mā tēnei tohu ka taea e te kaiwhakamahi te uru atu ki te atanga whakahaere whakaaetanga mō ia paetukutuku.

- Kua whakahohea te tautoko mō ngā toronga Intel Control-flow Enforcement Technology (CET) hei tiaki i ngā taputapu mai i te whakahaerenga o ngā mahi tinihanga i hangaia mā te whakamahi i ngā tikanga return-oriented programming (ROP).
- Kei te haere tonu ngā mahi ki te huri i te pūtirotiro ki te whakamahi i ngā kupu whakauru. Kua whakaingoatia anō te kōnae "master_preferences" ki "initial_preferences" kia kore ai e pā kino ki ngā kaiwhakamahi e whakaaro ana ko te kupu "master" he tohutoro ki te pononga o ō rātou tūpuna. Hei pupuri i te hototahitanga, ka noho tonu te tautoko mō "master_preferences" i roto i te pūtirotiro mō tētahi wā. Kua tangohia kētia e te pūtirotiro ngā kupu "whitelist," "blacklist," me "native."
- I roto i te putanga mo Android Ina whakahohea te aratau penapena raraunga "Lite", ka whakaitihia te tere moka mō ngā tango ataata mā ngā whatunga pūkoro, ka whakaitihia ngā utu mō ngā kaiwhakamahi he nui ngā raraunga e hiahiatia ana. Ka kōpekehia hoki e te aratau "Lite" ngā whakaahua e tonoa ana mai i ngā rauemi e wātea ana ki te marea (kāore e hiahiatia he manatoko) mā te HTTPS.
- Kua tāpirihia e mātou he pūwhakamātautau ataata AV1, he mea arotau mō te whakamahi i roto i ngā huihuinga ataata e hangai ana ki te WebRTC. Mā te whakamahi i te AV1 i roto i ngā huihuinga ataata ka pai ake te whai huatanga o te kōpeketanga, ā, ka taea te whakapāho i runga i ngā hongere he 30 kbps te whānui o te hononga.
- I roto i te JavaScript, ka whakatinanahia e Array, String, me TypedArrays te tikanga at(), e āhei ai te taupūtanga whanaunga (ka tohua te taupūtanga o te rarangi mā te whakamahi i tētahi tūranga whanaunga), tae atu ki ngā uara kino e pā ana ki te mutunga (hei tauira, ka whakahokia mai e "arr.at(-1)" te huānga whakamutunga o te rarangi).
- Kei ngā kīanga auau JavaScript tētahi āhuatanga hou, arā, ".indices," kei roto nei he huinga o ngā tūranga tīmatanga me ngā tūranga whakamutunga o ngā rōpū taurite. Ka whakakīia te āhuatanga ina whakahaerehia te kīanga auau me te haki "/d". const re = /(a)(b)/d; const m = re.exec('ab'); console.log(m.indices[0]); // 0 — ngā rōpū taurite katoa // → [0, 2] console.log(m.indices[1]); // 1 — te rōpū taurite tuatahi // → [0, 1] console.log(m.indices[2]); // 2 — te rōpū taurite tuarua // → [1, 2]
- Kua oti ngā whakapainga mahi mō ngā āhuatanga "super" (hei tauira, super.x) e whakamahi ana i te keteroki inline. He tata te mahi ina whakamahia ngā āhuatanga "super" ki tērā o te uru atu ki ngā āhuatanga noa.
- Kua tere ake te karanga i ngā mahi WebAssembly mai i JavaScript mā te whakamahi i te wetewete ā-roto. He whakamātautau tonu tēnei arotautanga, ā, me whakahaere me te haki "--turbo-inline-js-wasm-calls".
- Kua tāpirihia te WebXR Depth Sensing API, e āhei ai ngā kaiwhakamahi ki te whakatau i te tawhiti i waenga i ngā mea i roto i te taiao o te kaiwhakamahi me te pūrere o te kaiwhakamahi, hei tauira, hei waihanga i ngā tono mooni whakanui ake he tino pono ake. Hei whakamaumahara, ka taea e te WebXR API te whakakotahi i ngā rerengamahi puta noa i ngā momo pūrere mooni mariko, mai i ngā pane whakarongo 3D tūmau ki ngā otinga pūkoro.
- Kua whakapūmautia te Whakatau Rama AR WebXR, e āhei ai ngā wāhanga WebXR AR ki te whakatau tata i ngā āhuatanga rama taiao kia āhua tūturu ake ai ngā tauira, kia pai ake ai te whakauru atu ki te taiao o te kaiwhakamahi.
- Kua tāpirihia e Origin Trials (ngā āhuatanga whakamātautau e hiahia ana kia whakahohea motuhake) ētahi API hou e herea ana ki te tūāpapa i tēnei wā. AndroidMā te Whakamātautau Takenga ka taea e koe te whakamahi i te API kua tohua mai i ngā tono kua utaina mai i te localhost, i te 127.0.0.1 rānei, i muri rānei i te rēhitatanga me te whiwhinga i tētahi tohu motuhake e whai mana ana mō tētahi wā poto i runga i tētahi paetukutuku motuhake.
- Mā te tikanga getCurrentBrowsingContextMedia() ka taea e koe te hopu i tētahi awa ataata MediaStream e whakaatu ana i ngā ihirangi o te ripa o nāianei. He rerekē ki te tikanga getDisplayMedia(), ina karangahia te getCurrentBrowsingContextMedia(), ka whakaaturia ki te kaiwhakamahi tētahi pouaka kōrero māmā hei whakaū, hei ārai rānei i te whakawhiti ataata me ngā ihirangi o te ripa.
- Mā te API Insertable Streams ka taea te whakahaere i ngā awa pāpāho mata e tukuna ana mā te MediaStreamTrack API, pērā i ngā raraunga kāmera me te hopuoro, ngā hua hopu mata, ngā raraunga wetewaehere kōteke waenga rānei. Ka whakamahia ngā atanga WebCodec hei tohu i ngā anga mata, ā, muri iho ka hangaia he awa e rite ana ki tā te WebRTC Insertable Streams API e whakaputa ana i runga i te RTCPeerConnections. I roto i ngā kupu mahi, ka taea e te API hou te mahi pērā i te whakamahi i ngā tikanga ako mīhini hei tautuhi, hei tāpiri rānei i ngā mea i te wā tūturu, te tāpiri rānei i ngā pānga pērā i te tapahi papamuri i mua, i muri rānei i te whakawaehere e te kōteke.
- Ko te kaha ki te tākai rauemi ki roto i ngā paihere (WebBundle) kia pai ake ai te utaina o te maha o ngā kōnae e pā ana (ngā momo CSS, JavaScript, ngā whakaahua, ngā iframe). I roto i ngā ngoikoretanga o te tautoko paihere kōnae JavaScript o nāianei (webpack), e ngana ana a WebBundle ki te whakatika ko: ko te paihere tonu, engari ehara i ōna wāhanga, ka taea te pupuri i roto i te keteroki HTTP; ka tīmata pea te whakahiato me te whakahaere i muri i te tango katoa o te paihere; me whakakōwae ngā rauemi tāpiri, pērā i te CSS me ngā whakaahua, hei aho JavaScript, ka whakanui ake i te rahi o te kōnae, ā, me whai taahiraa tātaritanga tāpiri.
- Tautoko whakahaere hapa i roto i te WebAssembly.
- Kua whakapūmautia te Declarative Shadow DOM API mō te waihanga i ngā peka pakiaka hou i roto i te Shadow DOM, hei tauira, hei wehe i tētahi kāhua huānga tuatoru kua kawemai me tōna peka iti DOM e pā ana mai i te tuhinga matua. Mā tēnei API whakapuakitanga ka taea te wehe i ngā peka DOM mā te whakamahi i te HTML anake, me te kore e hiahiatia he JavaScript.
- Ko te āhuatanga CSS ōwehenga-āhua, e āhei ai koe ki te here tika i tētahi ōwehenga āhua ki tētahi huānga (mō te tatau aunoa i te rahi ngaro ina tohua te teitei, te whānui rānei anake), ka āhei inaianei te whakauru i ngā uara i te wā o te pakiwaituhi (he whakawhiti maeneene mai i tētahi ōwehenga āhua ki tētahi atu).
- Kua taapirihia te kaha ki te whakaata i te ahua o nga huānga HTML ritenga i roto i te CSS na roto i te akomanga pseudo ": state ()". Ka whakatinanahia te mahi ma te whakataurite me te kaha o nga huānga HTML paerewa ki te whakarereke i to raatau ahuatanga i runga i te taunekeneke a te kaiwhakamahi.
- Kei te tautokohia inaianei e te āhuatanga CSS "appearance" te uara 'auto', kua whakatakotoria nei hei taunoa mō Ā, , ā, i runga i te papaaho Android hei tāpiri atu mō , , , Ā, .
- Ka tautokona e te āhuatanga CSS "overflow" te uara "clip". Ina whakatakotoria, ka tapahia te ihirangi e puea ake ana ki te taha o te puea ake e whakaaetia ana o te poraka, ka ārai i te panuku. Ko te uara e whakatau ana i te tawhiti ka taea e te ihirangi te toro atu ki tua atu i te rohe poraka tuturu i mua i te tapahi ka whakatakotoria mā te whakamahi i te āhuatanga CSS hou "overflow-clip-margin". Ki te whakatauritea ki te "overflow: hidden," mā te whakamahi i te "overflow: clip" ka pai ake te mahi.


- Kua whakakapia te pane HTTP Āhuatanga-Kaupapahere ki tētahi pane hou Āhuatanga-Kaupapahere hei whakahaere i te tuku whakaaetanga me te whakahohe i ngā āhuatanga matatau, e tautoko ana i ngā uara āpure hanganga (hei tauira, ka taea e koe te tohu "Āhuatanga-Kaupapahere: geolocation=()" hei utu mō "Āhuatanga-Kaupapahere: geolocation 'kāore'").
- Kua whakapakaritia te parenga i te whakamahinga o ngā Pūrere Whakapūmau Kawa mō ngā whakaekenga i puta mai i te whakatinanatanga matapōkere o ngā tohutohu i roto i ngā tukatuka. Ka whakatinanahia tēnei parenga mā te tāpiri i te momo MIME "application/x-protobuffer" ki te rārangi o ngā momo MIME kāore i hongihia, ka tukatukahia mā te tikanga Cross-Origin-Read-Blocking. I mua, kua tāpirihia kētia te momo MIME "application/x-protobuf" ki tēnei rārangi, engari i tangohia te "application/x-protobuffer".
- Mā te File System Access API ka taea te neke i te tūranga kōnae o nāianei ki tua atu i tōna mutunga, ā, ka whakakīia te āputa e puta mai ana ki ngā kore i te wā e tuhi ana i muri mai mā te karanga i te FileSystemWritableFileStream.write(). Mā tēnei āheinga ka taea te waihanga i ngā kōnae tūkotahi me ngā wāhi takoto kau, ā, ka māmā ake te whakarite i te tuhi ki tētahi kōnae mō ngā awa me ngā taenga mai poraka raraunga kāore i te raupapahia (pērā i ērā e whakamahia ana i roto i te BitTorrent).
- Kua tāpirihia he kaihanga StaticRange me te whakatinanatanga o ngā momo Range māmā kāore e hiahiatia kia whakahōuhia ngā ahanoa e pā ana i ia wā ka huri te rākau DOM.
- Kua whakatinanahia te kaha ki te tautuhi i ngā tawhā whānui me te teitei mō ngā huānga , kua tohua i roto i te huānga Mā tēnei āhuatanga ka taea e koe te tatau i te ōwehenga āhua mō ngā huānga. , he rite ki te mahi mō , Ā, .
- Kua tangohia e WebRTC te tautoko kore-paerewa mō ngā Hongere Raraunga RTP, me te tūtohu kia whakamahia ngā hongere raraunga e hangai ana ki te SCTP.
- Ko ngā āhuatanga o navigator.plugins me navigator.mimeTypes inaianei ka whakahokia mai he uara kau (i muri i te whakamutua o te tautoko Flash, kāore i hiahiatia ēnei āhuatanga).
- He nui ngā whakapainga iti kua mahia ki ngā taputapu kaiwhakawhanake tukutuku, ā, kua tāpirihia he taputapu patuiro CSS flexbox hou.

Haunga ngā āhuatanga hou me ngā whakatikatika pepeke, e 37 ngā ngoikoretanga e arohia ana e te putanga hou. He maha ngā ngoikoretanga i kitea mā te whakamātautau aunoa mā te whakamahi i te AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer, me te AFL. Kāore i kitea he take nui e āhei ai te karo i ngā paparanga katoa o te tiakitanga pūtirotiro me te whakahaere i te waehere i waho o te taiao onepū. Hei wāhanga o te kaupapa utu ngoikore mō te tukunga o nāianei, kua whakawhiwhia e Google he 19 ngā utu, $54000 te tapeke (kotahi te utu $20000, kotahi te utu $10000, e rua ngā utu $5000, e toru ngā utu $3000, kotahi te utu $2000, kotahi te utu $1000, me ngā utu $500 e whā). Kāore anō kia whakatauhia te nui o ngā utu e ono.
He mea tika kia mōhiotia inanahi, whai muri i te hanganga o te putanga whakatikatika 89.0.4389.128, engari i mua i te tukunga o Chrome 90, i whakaputaina tētahi atu mahi tinihanga, e whakamahi ana i tētahi ngoikoretanga 0-rā hou kāore i whakatikahia i roto i te Chrome 89.0.4389.128. Kāore anō kia mārama mēnā kua whakatikahia tēnei raruraru i roto i te Chrome 90. Pērā i te take tuatahi, kotahi anake te ngoikoretanga e hipokina ana e te mahi tinihanga, ā, kāore he waehere hei karo i te wehenga o te pouaka onepu (ina whakahaerehia a Chrome me te haki "--no-sandbox", ka tukuna te mahi tinihanga ina whakatuwherahia he whārangi tukutuku i runga i te tūāpapa). Windows (ka taea ai e Notepad te whakarewa). Ka pāngia te hangarau WebAssembly e te ngoikoretanga e pā ana ki te whakamahinga hou.
Source: opennet.ru





