Chowonjezera cha msakatuli wa NoScript, mtundu 11.2.18, chatulutsidwa. Chimaletsa khodi yowopsa komanso yosafunikira ya JavaScript, komanso mitundu yosiyanasiyana ya ziwopsezo (XSS, DNS Rebinding, CSRF, Clickjacking). Mtundu watsopanowu umakonza vuto lomwe lachitika chifukwa cha kusintha kwa momwe fayilo:// imagwirira ntchito mu injini ya Chromium. Vutoli linaletsa mawebusayiti ambiri (Gmail, Facebook, ndi zina zotero) kuti asatsegulidwe atasinthidwa kukhala mtundu 11.2.16 m'mitundu yatsopano ya asakatuli ozikidwa pa Chromium (Chrome, Brave, ndi Vivaldi).
Vutoli linayambitsidwa ndi mitundu yatsopano ya Chromium yomwe imaletsa mwayi wofikira ku "file:///" URL mwachisawawa. Vutoli silinadziwike chifukwa limangowonekera pokhazikitsa NoScript kuchokera ku Chrome Store add-ons catalog. Kukhazikitsa zip archive kuchokera ku GitHub kudzera pa menyu ya "Load unpacked" (chrome://extensions > Developer mode) sikuyambitsa vutoli, chifukwa mwayi wofikira ku fayilo:/// URL sunatsekedwe mu developer mode. Kuyambitsa "Lolani mwayi wofikira ku ma URL a fayilo" mu add-on settings kumagwira ntchito ngati njira yothetsera vutoli.
Vutoli linakula kwambiri chifukwa chakuti NoScript 11.2.16 itasindikizidwa mu Chrome Web Store, wolembayo anayesa kuletsa kutulutsidwako, zomwe zinapangitsa kuti tsamba lonse la polojekitiyi lizimiririke. Kwa kanthawi, ogwiritsa ntchito sanathe kubwerera ku mtundu wakale ndipo anakakamizika kuletsa pulogalamu yowonjezera. Tsamba la Chrome Web Store tsopano labwezeretsedwa, ndipo vutoli lathetsedwa mu kutulutsidwa kwa 11.2.18. Pofuna kupewa kuchedwa kwa kuwunikira ma code, Chrome Web Store yaganiza zobwerera ku mtundu wakale ndikufalitsa kutulutsidwa kwa 11.2.17, komwe kuli kofanana ndi mtundu wa 11.2.11 womwe wawunikidwa kale.
Source: opennet.ru
