Kutulutsidwa kwa Chrome 103

Google yavumbulutsa kutulutsidwa kwa msakatuli wa Chrome 103. Pa nthawi yomweyi, kumasulidwa kokhazikika kwa pulojekiti yaulere ya Chromium, yomwe imakhala ngati maziko a Chrome, imapezeka. Msakatuli wa Chrome amasiyana ndi Chromium pakugwiritsa ntchito ma logo a Google, kukhalapo kwa dongosolo lotumizira zidziwitso pakagwa ngozi, ma module osewera makanema otetezedwa (DRM), kachitidwe kokhazikitsa zokha zosintha, kupangitsa kuti Sandbox adzipatula kwamuyaya. , kupereka makiyi a Google API ndi kutumiza RLZ- posaka. Kwa iwo omwe amafunikira nthawi yochulukirapo kuti asinthe, nthambi ya Extended Stable imathandizidwa padera, ndikutsatiridwa ndi masabata a 8. Kutulutsidwa kotsatira kwa Chrome 104 kukonzedwa pa Ogasiti 2.

Zosintha zazikulu mu Chrome 103:

• Onjezani chithunzi choyesera choyitanidwa kuti chisinthe zithunzi zamasamba. Mkonzi amapereka ntchito monga kubzala, kusankha malo, kujambula ndi burashi, kusankha mtundu, kuwonjezera malemba, ndi kusonyeza maonekedwe wamba ndi zoyamba monga mizere, makona, mabwalo, ndi mivi. Kuti mutsegule, muyenera kuyambitsa zoikamo "chrome://flags/#sharing-desktop-screenshots" ndi "chrome://flags/#sharing-desktop-screenshots-edit". Mukapanga chithunzithunzi kudzera mugawo logawana mu bar ya adilesi, mutha kupita kwa mkonzi podina batani la "Sinthani" patsamba lowonera.
• Kuthekera kwamakina omwe adawonjezedwa ku Chrome 101 pofotokozeratu zomwe akulangizidwa mu Omnibox adilesi yawonjezedwa. Zolosera zam'tsogolo zimakwaniritsa kuthekera komwe kunalipo kale pakukweza malingaliro omwe amatha kuyenda bwino osadikirira kuti munthu adina. Kuphatikiza pa kutsitsa, zomwe zili m'masamba okhudzana ndi malingaliro zitha kuperekedwa mu buffer (kuphatikiza script execution ndi mtengo wa DOM. formation), yomwe imalola kuwonetsa pompopompo zoyamikira mukangodina . Kuti muwongolere zolosera, zokonda "chrome://flags/#enable-prerender2", "chrome://flags/#omnibox-trigger-for-prerender2" ndi "chrome://flags/#search-suggestion-for -” aperekedwa. prerender2".

  Chrome 103 ya Android imawonjezera Speculations Rules API, yomwe imalola olemba mawebusayiti kuti auze osatsegula masamba omwe wogwiritsa ntchito amatha kuwachezera. Msakatuli amagwiritsa ntchito izi kuti atsegule ndikupereka zomwe zili patsamba.

• Mtundu wa Android uli ndi manejala achinsinsi atsopano omwe amapereka chidziwitso chofanana chachinsinsi chopezeka mu mapulogalamu a Android.
• Mtundu wa Android wawonjezera chithandizo cha "With Google", chomwe chimalola wogwiritsa ntchito kuthokoza masamba omwe amawakonda omwe adalembetsa nawo ntchitoyi posamutsa zomata zolipira kapena zaulere. Ntchitoyi ikupezeka kwa ogwiritsa ntchito aku US okha.
• Kudzaza kokwanira m'magawo ndi manambala a kirediti kadi ndi kirediti kadi, omwe tsopano amathandizira makhadi osungidwa kudzera pa Google Pay.
• Mtundu wa Windows umagwiritsa ntchito kasitomala wa DNS wokhazikika, womwe umagwiritsidwanso ntchito m'mitundu ya macOS, Android ndi Chrome OS.
• Local Font Access API yakhazikika ndikuperekedwa kwa aliyense, yomwe mutha kufotokozera ndikugwiritsa ntchito mafonti omwe adayikidwa pamakina, komanso kuwongolera mafonti pamlingo wotsika (mwachitsanzo, zosefera ndikusintha ma glyphs).
• Thandizo lowonjezera la code 103 ya HTTP, yomwe imakulolani kuti mudziwitse kasitomala za zomwe zili m'makutu ena a HTTP mwamsanga mutangopempha, osadikira kuti seva imalize ntchito zonse zokhudzana ndi pempho ndikuyamba kutumikira zomwe zili. Momwemonso, mutha kupereka malingaliro okhudzana ndi tsamba lomwe likuperekedwa zomwe zitha kutsitsidwa (mwachitsanzo, maulalo a css ndi javascript omwe amagwiritsidwa ntchito patsambalo atha kuperekedwa). Atalandira zambiri zazinthu zotere, msakatuli akhoza kuyamba kuzitsitsa popanda kudikirira kuti tsamba lalikulu limalize kumasulira, zomwe zimachepetsa nthawi yonse yofunsira.
• Mumayendedwe Oyambira Mayesero (zoyeserera zomwe zimafunikira kutsegulira kosiyana), kuyesa kwa Federated Credential Management (FedCM) API kwayamba pano pamisonkhano ya nsanja ya Android, yomwe imakupatsani mwayi wopanga zidziwitso zolumikizana zomwe zimatsimikizira zachinsinsi ndikugwira ntchito popanda mtanda. -njira zotsatirira malo, monga ma cookie a chipani chachitatu. Origin Trial amatanthauza kuthekera kogwira ntchito ndi API yotchulidwa kuchokera ku mapulogalamu omwe adatsitsidwa kuchokera ku localhost kapena 127.0.0.1, kapena mutalembetsa ndi kulandira chizindikiro chapadera chomwe chili chovomerezeka kwa nthawi yochepa pa tsamba linalake.
• Client Hints API, yomwe ikupangidwa kuti ilowe m'malo mwa mutu wa User-Agent ndipo imakupatsani mwayi wosankha zambiri za msakatuli ndi magawo a dongosolo (mtundu, nsanja, ndi zina) pokhapokha pempho la seva, lawonjezera kuthekera kosintha mayina opeka pamndandanda wa zozindikiritsa asakatuli, malinga ndi mafananidwe ndi makina a GREASE (Generate Random Extensions And Sustain Extensibility) omwe amagwiritsidwa ntchito mu TLS. Mwachitsanzo, kuwonjezera "Chrome"; v="103″' ndi '"Chromium"; v=»103″' chizindikiritso chachisawawa cha msakatuli kulibe ''(Ayi; Msakatuli"; v=»12″' akhoza kuwonjezeredwa pamndandanda. zomwe zimatsogolera ku mfundo yakuti osatsegula ena amakakamizika kunamizira kuti ndi asakatuli ena otchuka kuti alambalale ndikuyang'ana pamndandanda wa asakatuli ovomerezeka.
• Mafayilo amtundu wa zithunzi za AVIF awonjezedwa pamndandanda wololedwa kugawana kudzera pa iWeb Share API.
• Thandizo lowonjezera la "deflate-raw" psinjika mtundu, kulola mwayi wopita kumtsinje wopanda kanthu wopanda mitu ndi midadada yomaliza, yomwe ingagwiritsidwe ntchito, mwachitsanzo, kuwerenga ndi kulemba mafayilo a zip.
• Pazinthu zamawebusayiti, ndizotheka kugwiritsa ntchito mawonekedwe a "rel", omwe amakupatsani mwayi wogwiritsa ntchito "rel=noreferrer" poyang'ana pamasamba kuti mulepheretse kutumiza kwa mutu wa Referer kapena "rel=noopener" kuti muyimitse makonda. katundu wa Window.opener ndikukana mwayi wopita ku nkhani yomwe kusinthako kunapangidwira.
• Kukhazikitsa kwa chochitika cha popstate kwagwirizana ndi machitidwe a Firefox. Chochitika cha popstate tsopano chachotsedwa patangosintha ulalo, osadikirira kuti chochitikacho chichitike.
• Pamasamba otsegulidwa opanda HTTPS komanso kuchokera kumabuloko a iframe, kulowa kwa Gampepad API ndi API ya Battery Status API ndikoletsedwa.
• Njira ya kuiwala () yawonjezedwa ku chinthu cha SerialPort kuti musiye zilolezo zomwe zidaperekedwa kale kwa wogwiritsa ntchito kuti alowe padoko la serial.
• Mawonekedwe a bokosi lowoneka awonjezedwa ku katundu wa CSS osefukira-clip-margin, omwe amasankha komwe angayambire kudula zomwe zimadutsa malire aderalo (zimatha kutenga zomwe zili mubokosi, padding-box ndi malire- bokosi).
• Mu ma block a iframe okhala ndi sandbox, kuyimba ma protocol akunja ndikuyambitsa mapulogalamu akunja ndikoletsedwa. Kuti muchotse chiletsocho, gwiritsani ntchito zolola-pop-ups, kulola-pamwamba-kuyenda, ndi kulola-pamwamba-kufufuza-ndi-kutsegula-machitidwe.
• Chinthu sichikugwiranso ntchito , zomwe zinakhala zopanda tanthauzo pambuyo poti mapulagini sanathandizidwe.
• Kuwongolera kwapangidwa kwa zida za opanga mawebusayiti. Mwachitsanzo, mugawo la Masitayelo zinakhala zotheka kudziwa mtundu wa mfundo kunja kwa zenera la osatsegula. Kuwoneka bwino kwamitengo ya parameter mu debugger. Anawonjezera kuthekera kosintha dongosolo la mapanelo mu mawonekedwe a Elements.

Kuphatikiza pazatsopano ndi kukonza zolakwika, mtundu watsopano umachotsa zovuta 14. Zofooka zambiri zidadziwika chifukwa choyesera zokha pogwiritsa ntchito AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer ndi zida za AFL. Limodzi mwamavuto (CVE-2022-2156) lapatsidwa gawo lalikulu lachiwopsezo, zomwe zikutanthauza kuthekera kodutsa magawo onse achitetezo cha asakatuli ndikuchita ma code pa system kunja kwa sandbox. Zambiri pazachiwopsezozi sizinafotokozedwebe, zimangodziwika kuti zimayamba chifukwa chopeza chotchinga chaulere (chogwiritsa ntchito pambuyo pake).

Monga gawo la pulogalamu yolipira mphotho zandalama pozindikira zovuta zomwe zatulutsidwa pano, Google idapereka mphotho 9 zokwana madola 44 sauzande aku US (mphoto imodzi ya $20000, mphotho imodzi ya $7500, mphotho imodzi ya $7000, mphotho ziwiri za $3000 ndi imodzi mwa $2000, $1000 ndi $500). Kukula kwa mphotho yachiwopsezo chachikulu sikunadziwikebe.

Source: opennet.ru