Kutulutsidwa koyamba pagulu kwa NoScript yowonjezera ya Chrome

Giorgio Maone, mlengi wa pulojekiti ya NoScript, adapereka kutulutsidwa koyamba kwa zowonjezera za Chrome msakatuli, zomwe zikupezeka kuti ziyesedwe. Kumangaku kumagwirizana ndi mtundu wa 10.6.1 wa Firefox ndipo zidatheka chifukwa cha kusamutsidwa kwa nthambi ya NoScript 10 kupita kuukadaulo wa WebExtension. Kutulutsidwa kwa Chrome kuli pa beta ndipo kulipo kuti mutsitsidwe kuchokera ku Chrome Web Store. NoScript 11 ikukonzekera kumasulidwa kumapeto kwa June, komwe kudzakhala koyamba kutulutsidwa ndi chithandizo chokhazikika cha Chrome / Chromium.

Chowonjezera chomwe chimapangidwira kuletsa JavaScript code yoopsa komanso yosafunikira, komanso mitundu yosiyanasiyana ya kuukira (XSS, DNS Rebinding, CSRF, Clickjacking), imagwiritsidwa ntchito ngati gawo la Tor Browser ndi magawo ambiri achinsinsi. Zikudziwika kuti maonekedwe a Chrome Chrome ndi gawo lofunika kwambiri pa chitukuko cha polojekiti - maziko a code tsopano ali ogwirizana ndipo angagwiritsidwe ntchito popanga misonkhano ya Firefox ndi asakatuli kutengera injini ya Chromium.

Kumodzi mwazosiyana mu mtundu woyeserera wa NoScript wa Chrome ndikuyimitsa fyuluta ya XSS yomwe imagwiritsidwa ntchito kuletsa zolemba zapamalo ndikulowa m'malo mwa JavaScript ya chipani chachitatu. Mpaka pomwe izi zikugwira ntchito, ogwiritsa ntchito azidalira XSS Auditor yomangidwa ndi Chrome, yomwe siyothandiza ngati NoScript's Injection Checker. Zosefera za XSS sizinganyamulidwe panobe chifukwa zimafuna kukonzedwa mosagwirizana kuti zigwire ntchito. Panthawi ina, posamukira ku WebExtension, opanga Mozilla adakhazikitsa mu API iyi zinthu zina zapamwamba zofunika pa NoScript, monga ma asynchronous handlers, omwe Google sinasamutsirebe ku Chrome.

Source: opennet.ru

Kuwonjezera ndemanga