Chrome iyamba kuletsa kutsitsa mafayilo kudzera pa HTTP

Google losindikizidwa dongosolo lowonjezera njira zatsopano zotetezera kutsitsa mafayilo osatetezedwa mu Chrome. Mu Chrome 86, yomwe ikuyenera kumasulidwa pa October 26, kutsitsa mitundu yonse ya mafayilo kudzera pa maulalo kuchokera pamasamba otsegulidwa kudzera pa HTTPS zitha zotheka ngati mafayilo atumizidwa pogwiritsa ntchito protocol ya HTTPS. Zimadziwika kuti kutsitsa mafayilo popanda kubisa kungagwiritsidwe ntchito kuchita zinthu zoyipa kudzera m'malo mwa MITM (mwachitsanzo, pulogalamu yaumbanda yomwe imawononga ma routers apanyumba imatha kulowa m'malo omwe adatsitsidwa kapena kutseka zikalata zachinsinsi).

Kutsekereza kudzachitika pang'onopang'ono, kuyambira ndi kutulutsidwa kwa Chrome 82, momwe chenjezo lidzayamba kuwonekera poyesa kutsitsa mafayilo omwe angathe kuchitidwa mosatetezeka kudzera pamasamba a HTTPS. Mu Chrome 83, kutsekereza kudzayatsidwa mafayilo omwe angathe kuchitidwa, ndipo chenjezo lidzayamba kuperekedwa pazosungidwa. Chrome 84 ipangitsa kutsekereza kwa zakale ndi chenjezo la zikalata. Mu Chrome 85, zolemba zidzatsekedwa ndipo chenjezo lidzayamba kuwonekera kuti mutsitse zithunzi, makanema, zomvera, ndi zolemba, zomwe zidzayamba kutsekedwa mu Chrome 86.

Chrome iyamba kuletsa kutsitsa mafayilo kudzera pa HTTP

M'tsogolomu, pali zolinga zosiya kuthandizira kukweza mafayilo popanda kubisa. Pazotulutsa za Android ndi iOS, kutsekereza kudzakhazikitsidwa ndi kutulutsidwa kumodzi (m'malo mwa Chrome 82 - mu 83, ndi zina). Mu Chrome 81, njira ya "chrome://flags/#treat-unsafe-downloads-as-active-content" idzawonekera pazikhazikiko, zomwe zimakupatsani mwayi wochenjeza popanda kuyembekezera Chrome 82 kumasulidwa.

Chrome iyamba kuletsa kutsitsa mafayilo kudzera pa HTTP

Source: opennet.ru

Kuwonjezera ndemanga