Google idamvera chitsutsocho ndikusiya kulimbikitsa Web Environment Integrity API, idachotsa kuyesa kwake ku Chromium codebase ndikusuntha malo osungiramo zinthu zakale. Nthawi yomweyo, kuyesa kumapitilira pa nsanja ya Android ndikukhazikitsa API yofananira yotsimikizira chilengedwe cha ogwiritsa ntchito - WebView Media Integrity, yomwe imayikidwa ngati chowonjezera kutengera Google Mobile Services (GMS). Zanenedwa kuti WebView Media Integrity API ingokhala pagawo la WebView ndi mapulogalamu okhudzana ndi kukonza zinthu zamawu, mwachitsanzo, ikhoza kugwiritsidwa ntchito pamapulogalamu am'manja potengera WebView potsitsa mawu ndi makanema. Palibe mapulani operekera mwayi ku API iyi kudzera pa msakatuli.
Web Environment Integrity API idapangidwa kuti ipatse eni malo mwayi wowonetsetsa kuti malo a kasitomala ndi odalirika poteteza deta ya ogwiritsa ntchito, kulemekeza nzeru, komanso kucheza ndi munthu weniweni. Zinkaganiziridwa kuti API yatsopano ikhoza kukhala yothandiza m'madera omwe malo amafunika kuonetsetsa kuti pali munthu weniweni ndi chipangizo chenicheni kumbali inayo, komanso kuti msakatuliyo sakusinthidwa kapena kugwidwa ndi pulogalamu yaumbanda. APIyi idakhazikitsidwa paukadaulo wa Play Integrity, womwe umagwiritsidwa ntchito kale papulatifomu ya Android kutsimikizira kuti pempholi likuchokera ku pulogalamu yosasinthidwa yomwe idayikidwa mukatalogu ya Google Play yomwe ikugwira ntchito pa chipangizo chenicheni cha Android.
Ponena za Web Environment Integrity API, itha kugwiritsidwa ntchito kusefa magalimoto kuchokera ku bots powonetsa kutsatsa; Kulimbana ndi sipamu yotumiza zokha ndikuwonjezera mavoti pamasamba ochezera; kuzindikira zolakwika powonera zomwe zili ndi copyright; kulimbana ndi chinyengo ndi makasitomala abodza m'masewera a pa intaneti; kuzindikira kupangidwa kwa nkhani zabodza ndi bots; kuletsa kulosera zachinsinsi; chitetezo ku phishing, chokhazikitsidwa pogwiritsa ntchito pulogalamu yaumbanda yomwe imawulutsa zotuluka kumasamba enieni.
Kuti mutsimikizire malo osatsegula omwe JavaScript code yodzaza imayikidwa, Web Environment Integrity API idakonza kugwiritsa ntchito chizindikiro chapadera choperekedwa ndi wotsimikizira wina (atester), womwe ukhoza kulumikizidwa ndi unyolo wodalirika wokhala ndi njira zowongolera kukhulupirika. papulatifomu (mwachitsanzo, Google Play) . Chizindikirocho chinapangidwa potumiza pempho kwa seva yachitatu yovomerezeka, yomwe, itatha kuchita macheke ena, inatsimikizira kuti malo osatsegula sanasinthidwe. Kuti zitsimikizidwe, zowonjezera za EME (Encrypted Media Extensions) zinagwiritsidwa ntchito, zofanana ndi zomwe zimagwiritsidwa ntchito mu DRM kuti azindikire zomwe zili ndi copyright. Mwachidziwitso, EME ndi yosagwirizana ndi ogulitsa, koma pochita zinthu zitatu zomwe zakhazikitsidwa zakhala zofala: Google Widevine (yomwe imagwiritsidwa ntchito mu Chrome, Android, ndi Firefox), Microsoft PlayReady (yomwe imagwiritsidwa ntchito mu Microsoft Edge ndi Windows), ndi Apple FairPlay (yomwe imagwiritsidwa ntchito ku Safari. ndi Products Apple).
Kuyesera kugwiritsa ntchito API yomwe ikufunsidwa kwadzetsa nkhawa kuti ikhoza kusokoneza kutseguka kwa Webusayiti ndikupangitsa kuti ogwiritsa ntchito azidalira kwambiri mavenda awo, komanso kuchepetsa kuthekera kogwiritsa ntchito asakatuli ena ndikupangitsa kuti pakhale kutsatsa kwatsopano. osatsegula kumsika. Zotsatira zake, ogwiritsa ntchito amatha kudalira asakatuli omwe atulutsidwa mwalamulo, popanda zomwe amalephera kugwira ntchito ndi mawebusayiti akuluakulu ndi ntchito.
Source: opennet.ru