Kutulutsidwa kwa Chrome 102

Google yavumbulutsa kutulutsidwa kwa msakatuli wa Chrome 102. Panthawi imodzimodziyo, kumasulidwa kokhazikika kwa pulojekiti yaulere ya Chromium, yomwe imakhala ngati maziko a Chrome, ikupezeka. Msakatuli wa Chrome amasiyana ndi Chromium pakugwiritsa ntchito ma logo a Google, kukhalapo kwa dongosolo lotumizira zidziwitso pakagwa ngozi, ma module osewera makanema otetezedwa (DRM), kachitidwe kokhazikitsa zokha zosintha, kupangitsa kuti Sandbox adzipatula kwamuyaya. , kupereka makiyi a Google API ndi kutumiza RLZ- posaka. Kwa iwo omwe amafunikira nthawi yochulukirapo kuti asinthe, nthambi ya Extended Stable imathandizidwa padera, ndikutsatiridwa ndi masabata a 8. Kutulutsidwa kotsatira kwa Chrome 103 kukonzedwa pa June 21st.

Zosintha zazikulu mu Chrome 102:

• Kuti aletse kugwiritsa ntchito ziwopsezo zomwe zimachitika chifukwa chofikira zomakumbukira zomasulidwa kale (zogwiritsa ntchito pambuyo pake), m'malo mwazolozera wamba, mtundu wa MiraclePtr (raw_ptr) unayamba kugwiritsidwa ntchito. MiraclePtr imapereka zomangira zolozera zomwe zimayang'ananso zowonjezera zofikira kumalo osungira kukumbukira ndi kuwonongeka ngati zopezekazo zapezeka. Zotsatira za njira yatsopano yotetezera pakugwira ntchito ndi kukumbukira kukumbukira zimayesedwa ngati zosafunika. Makina a MiraclePtr sagwiritsidwa ntchito m'njira zonse, makamaka sagwiritsidwa ntchito popereka njira, koma akhoza kupititsa patsogolo chitetezo. Mwachitsanzo, pakutulutsidwa komweku, mwa zofooka za 32 zokhazikika, 12 zidachitika chifukwa cha zovuta zogwiritsa ntchito pambuyo pake.
• Mapangidwe a mawonekedwe omwe ali ndi chidziwitso chotsitsa asinthidwa. M'malo mwazomwe zili ndi zambiri pakutsitsa, chizindikiro chatsopano chawonjezeredwa pagawo lomwe lili ndi adilesi; mukadina, kupita patsogolo kwa kutsitsa mafayilo ndi mbiri yokhala ndi mndandanda wamafayilo omwe adatsitsidwa kale akuwonetsedwa. Mosiyana ndi pansi gulu, batani nthawi zonse anasonyeza pa gulu ndi limakupatsani mwamsanga kulumikiza wanu Download mbiri. Mawonekedwe atsopanowa amaperekedwa mwachisawawa kwa ogwiritsa ntchito ena ndipo adzaperekedwa kwa onse ngati palibe mavuto. Kuti mubwezere mawonekedwe akale kapena kuyatsa yatsopano, makonda a "chrome://flags#download-bubble" amaperekedwa.
• Mukasaka zithunzi kudzera pazosankha ("Sakani chithunzi ndi Google Lens" kapena "Pezani kudzera pa Google Lens"), zotsatira zake sizikuwonetsedwa patsamba lina, koma m'mbali mwammbali pafupi ndi zomwe zili patsamba loyambirira (mu. zenera limodzi mutha kuwona zomwe zili patsamba limodzi ndi zotsatira zakupeza injini yosakira).
• Mugawo la "Zazinsinsi ndi Chitetezo" la zochunira, gawo la "Zokonda Zazinsinsi" lawonjezedwa, lomwe limapereka chithunzithunzi cha zokonda zazikulu zomwe zimakhudza zinsinsi ndi mafotokozedwe atsatanetsatane azomwe zimachitika pakusintha kulikonse. Mwachitsanzo, m'gawoli mutha kufotokozera ndondomeko yotumizira deta ku mautumiki a Google, kuyang'anira kuyanjanitsa, kukonza ma cookie ndi kusunga mbiri. Ntchitoyi imaperekedwa kwa ena ogwiritsa ntchito; kuti muyitse, mutha kugwiritsa ntchito "chrome: // flags #chinsinsi-guide".
• Kupanga mbiri yakusaka ndi masamba omwe adawonedwa kumaperekedwa. Mukayesa kusaka kachiwiri, mawu akuti "Yambitsaninso ulendo wanu" akuwonetsedwa mu bar ya ma adilesi, kukulolani kuti mupitilize kusaka kuchokera pamalo pomwe adasokonezedwa nthawi yatha.
• Chrome Web Store imapereka tsamba la "Extensions Starter Kit" lomwe lili ndi zosankha zoyambira zowonjezera.
• Munjira yoyesera, kutumiza chololeza cha CORS (Cross-Origin Resource Sharing) ku seva yayikulu yatsamba ndi mutu wakuti "Access-Control-Request-Private-Network: true" imayatsidwa tsambalo likapeza chothandizira pa netiweki yamkati ( 192.168.xx , 10.xxx, 172.16.xx) kapena localhost (128.xxx). Mukatsimikizira ntchitoyi poyankha pempholi, seva iyenera kubwezera mutu wa "Access-Control-Allow-Private-Network: true". Mu Chrome version 102, zotsatira zotsimikizira sizikukhudzabe kukonzanso kwa pempho - ngati palibe chitsimikizo, chenjezo likuwonetsedwa pa intaneti, koma pempho la subresource palokha silinatsekedwe. Kuyatsa kutsekereza pakapanda chitsimikiziro kuchokera pa seva sikuyembekezereka mpaka kutulutsidwa kwa Chrome 105. Kuti mutsegule kutulutsa koyambirira, mutha kuyatsa zochunira "chrome://flags/#private-network-access-respect-preflight- zotsatira".

  Kutsimikiziridwa kwaulamuliro ndi seva kunayambika kuti kulimbikitse chitetezo kuzovuta zokhudzana ndi kupeza zinthu pamanetiweki am'deralo kapena pakompyuta ya wogwiritsa ntchito (localhost) kuchokera pamawu omwe adayikidwa potsegula tsamba. Zopempha zoterezi zimagwiritsidwa ntchito ndi omwe akuukira kuti achite ziwonetsero za CSRF pa ma routers, malo olowera, makina osindikizira, ma intaneti amakampani ndi zida zina ndi mautumiki omwe amavomereza zopempha kuchokera pa netiweki yapafupi. Kuti muteteze ku zowawa zotere, ngati zida zilizonse zipezeka pa netiweki yamkati, msakatuli amatumiza pempho lachidziwitso chololeza kutsitsa zida zazing'onozi.

• Mukatsegula maulalo mumayendedwe a incognito kudzera pazosankha, magawo ena omwe amakhudza zachinsinsi amachotsedwa pa URL.
• Njira yobweretsera zosintha za Windows ndi Android zasinthidwa. Kuti mufananize bwino zomwe zatulutsidwa zatsopano ndi zakale, zomanga zingapo za mtundu watsopanowu tsopano zapangidwa kuti zitsitsidwe.
• Ukadaulo wogawira ma netiweki wakhazikika kuti utetezedwe ku njira zotsatirira mayendedwe a ogwiritsa ntchito pakati pamasamba potengera zozindikiritsa zosungira m'malo omwe sanasungidwe kusungirako zidziwitso zonse ("Supercookies"). Chifukwa zinthu zosungidwa zimasungidwa m'malo amodzi, mosasamala kanthu komwe adachokera, tsamba limodzi limatha kudziwa kuti tsamba lina likukweza zinthu poyang'ana ngati chidacho chili mu cache. Chitetezo chimakhazikitsidwa pakugwiritsa ntchito magawo a netiweki (Network Partitioning), chomwe chimaphatikizapo kuwonjezera ku ma cache omwe amagawana nawo ma rekodi kudera lomwe tsamba lalikulu limatsegulidwa, zomwe zimalepheretsa kubisala kwa cache kwa zolemba zotsatirira zokha. patsamba lapano (chilemba chochokera ku iframe sichingathe kuwona ngati chidacho chidatsitsidwa patsamba lina). Kugawana kwa boma kumakhudza ma netiweki (HTTP/1, HTTP/2, HTTP/3, websocket), cache ya DNS, ALPN/HTTP2, TLS/HTTP3 data, kasinthidwe, kutsitsa, ndi zidziwitso zapamutu wa Expect-CT.
• Pamapulogalamu oyika okha pa intaneti (PWA, Progressive Web App), ndizotheka kusintha mawonekedwe amtundu wazenera pogwiritsa ntchito zida za Window Controls Overlay, zomwe zimakulitsa mawonekedwe a pulogalamu yapaintaneti pazenera lonse. Pulogalamu yapaintaneti imatha kuwongolera kachitidwe ndi kuyika pazenera lonse, kupatula chotchinga chokhala ndi mabatani owongolera zenera (kutseka, kuchepetsa, kukulitsa), kuti tsamba lawebusayiti liwoneke ngati pulogalamu yanthawi zonse yapakompyuta.
• Mu mawonekedwe a autofill system, chithandizo chawonjezedwa popanga manambala a kirediti kadi m'magawo okhala ndi zambiri zolipirira katundu m'masitolo apaintaneti. Kugwiritsa ntchito kirediti kadi, kuchuluka kwake komwe kumapangidwa pamalipiro aliwonse, kumakupatsani mwayi kuti musasamutse zambiri za kirediti kadi yeniyeni, koma pamafunika kupereka chithandizo chofunikira ndi banki. Ntchitoyi ikupezeka kwa makasitomala aku banki aku US okha. Kuti muwongolere kuphatikizidwa kwa ntchitoyi, makonzedwe a "chrome://flags/#autofill-enable-virtual-card" aperekedwa.
• Makina a "Capture Handle" amayatsidwa mwachisawawa, kukulolani kusamutsa zambiri ku mapulogalamu omwe amajambula kanema. API imapangitsa kuti pakhale zotheka kukonza mgwirizano pakati pa mapulogalamu omwe zolemba zawo zimalembedwa ndi mapulogalamu omwe amajambula. Mwachitsanzo, pulogalamu yochitira misonkhano yamakanema yomwe ikujambula kanema kuti iwulutse ulaliki imatha kupeza zambiri zokhudzana ndi zowongolera ndikuziwonetsa pawindo la kanema.
• Kuthandizira malamulo ongopeka kumathandizidwa mwachisawawa, ndikupereka mawu osinthika kuti athe kudziwa ngati deta yokhudzana ndi ulalo imatha kukwezedwa mwachangu wogwiritsa ntchito asanadutse ulalo.
• Makina oyika zinthu m'mapaketi amtundu wa Web Bundle adakhazikika, kulola kukulitsa luso lotsitsa mafayilo ambiri otsagana nawo (ma CSS masitayilo, JavaScript, zithunzi, iframes). Mosiyana ndi phukusi lamtundu wa Webpack, mawonekedwe a Web Bundle ali ndi zotsatirazi: si phukusi lokha lomwe limasungidwa mu cache ya HTTP, koma zigawo zake; kuphatikiza ndi kupha JavaScript kumayamba osadikirira kuti phukusi litsitsidwe kwathunthu; Zimaloledwa kuphatikiza zina zowonjezera monga CSS ndi zithunzi, zomwe mupackpack ziyenera kusungidwa mu mawonekedwe a zingwe za JavaScript.
• Ndizotheka kutanthauzira pulogalamu ya PWA ngati chothandizira mitundu ina ya MIME ndi zowonjezera mafayilo. Pambuyo pofotokoza zomangirira kudzera pagawo la file_handlers mu manifesto, pulogalamuyo ilandila chochitika chapadera pomwe wosuta ayesa kutsegula fayilo yolumikizidwa ndi pulogalamuyi.
• Adawonjezera mawonekedwe atsopano omwe amakulolani kuti mulembe gawo la mtengo wa DOM ngati "osagwira ntchito". Kwa ma DOM node m'chigawo chino, kusankha malemba ndi zowongolera zolembera ndizozimitsa, mwachitsanzo. Zochitika za pointer ndi zosankhidwa ndi ogwiritsa ntchito CSS nthawi zonse zimayikidwa 'palibe'. Ngati node ikhoza kusinthidwa, ndiye kuti mu inert mode imakhala yosasinthika.
• Onjezani Navigation API, yomwe imalola mapulogalamu kuti azitha kuyang'ana pawindo, kuyambitsa kusakatula, ndi kusanthula mbiri yazomwe zachitika ndi pulogalamuyi. API imapereka njira ina kuwindo.history ndi window.location properties, zokongoletsedwa ndi mapulogalamu a tsamba limodzi.
• Mbendera yatsopano, "mpaka itapezeka", yaperekedwa kuti ikhale "yobisika", yomwe imapangitsa kuti chinthucho chisafufuzidwe patsamba ndikusunthika ndi chigoba. Mwachitsanzo, mutha kuwonjezera zolemba zobisika patsamba, zomwe zili muzosaka zapafupi.
• Mu WebHID API, yopangidwira mwayi wofikira pazida za HID (zida zowonetsera anthu, makiyibodi, mbewa, ma gamepad, touchpads) ndikukonzekera ntchito popanda kukhalapo kwa madalaivala apadera mudongosolo, katundu wa exclusionFilters wawonjezedwa ku requestDevice( ) chinthu, chomwe chimakupatsani mwayi wopatula zida zina pomwe msakatuli akuwonetsa mndandanda wa zida zomwe zilipo. Mwachitsanzo, mutha kusapatula ma ID a chipangizo omwe ali ndi zovuta zodziwika.
• Ndizoletsedwa kuwonetsa fomu yolipira kudzera mu kuyimbira kwa PaymentRequest.show() popanda kuchitapo kanthu mwachindunji, mwachitsanzo, kudina chinthu chogwirizana ndi chogwirizira.
• Thandizo la kukhazikitsidwa kwina kwa protocol ya SDP (Session Description Protocol) yogwiritsidwa ntchito pokhazikitsa gawo mu WebRTC yathetsedwa. Chrome idapereka njira ziwiri za SDP - zolumikizidwa ndi asakatuli ena komanso mwachindunji Chrome. Kuyambira pano, njira yokhayo yonyamulika ndiyo yatsala.
• Kuwongolera kwapangidwa kwa zida za opanga mawebusayiti. Mabatani owonjezera pagawo la Masitayelo kuti muyesere kugwiritsa ntchito mutu wakuda ndi wopepuka. Kutetezedwa kwa tabu ya Preview mumayendedwe owunikira maukonde kwalimbikitsidwa (kugwiritsa ntchito Content Security Policy ndikoyambitsidwa). The debugger imagwiritsa ntchito kuyimitsa script kuti ilowetsenso zosokoneza. Kukhazikitsa koyambirira kwa gulu latsopano la "Performance insights" kwaperekedwa, zomwe zimakulolani kuti mufufuze momwe ntchito zina zimagwirira ntchito patsamba.

Kuphatikiza pazatsopano ndi kukonza zolakwika, mtundu watsopanowu umachotsa ziwopsezo za 32. Zofooka zambiri zidadziwika chifukwa choyesera zokha pogwiritsa ntchito AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer ndi zida za AFL. Limodzi mwamavuto (CVE-2022-1853) lapatsidwa gawo lalikulu lachiwopsezo, zomwe zikutanthauza kuti mutha kuzilambalala milingo yonse yachitetezo cha asakatuli ndikuchita ma code pa system kunja kwa sandbox. Zambiri pazachiwopsezozi sizinafotokozedwe; zimangodziwika kuti zimayamba chifukwa chopeza chotchinga chaulere (chogwiritsa ntchito pambuyo pake) pakukhazikitsa Indexed DB API.

Monga gawo la pulogalamu yolipira ndalama pozindikira zovuta zomwe zatulutsidwa pano, Google idapereka mphotho 24 zokwana $65600 (mphotho imodzi ya $10000, mphotho imodzi ya $7500, mphotho ziwiri za $7000, mphotho zitatu za $5000, mphotho zinayi za $3000, $2000 iwiri ya $1000, $500 bonasi). Kukula kwa mphotho 7 sikunadziwikebe.

Source: opennet.ru