Kutulutsidwa kwa Chrome 104

Google yavumbulutsa kutulutsidwa kwa msakatuli wa Chrome 104. Pa nthawi yomweyi, kumasulidwa kokhazikika kwa pulojekiti yaulere ya Chromium, yomwe imakhala ngati maziko a Chrome, imapezeka. Msakatuli wa Chrome amasiyana ndi Chromium pakugwiritsa ntchito ma logo a Google, kukhalapo kwa dongosolo lotumizira zidziwitso pakagwa ngozi, ma module osewera makanema otetezedwa (DRM), kachitidwe kokhazikitsa zokha zosintha, kupangitsa kuti Sandbox adzipatula kwamuyaya. , kupereka makiyi a Google API ndi kutumiza RLZ- posaka. Kwa iwo omwe amafunikira nthawi yochulukirapo kuti asinthe, nthambi ya Extended Stable imathandizidwa padera, ndikutsatiridwa ndi masabata a 8. Kutulutsidwa kotsatira kwa Chrome 105 kukonzedwa pa Ogasiti 30.

Zosintha zazikulu mu Chrome 104:

• Malire a moyo wa cookie akhazikitsidwa - Ma cookie onse atsopano kapena osinthidwa adzachotsedwa okha patatha masiku 400 akukhalapo, ngakhale nthawi yomaliza yoperekedwa ndi Expires ndi Max-Age ipitilira masiku 400 (kwa Ma Cookies oterowo, nthawi yamoyo idzachepetsedwa. mpaka masiku 400). Ma cookie omwe adapangidwa asanakhazikitsidwe lamuloli azisunga moyo wawo wonse, ngakhale atadutsa masiku 400, koma adzakhala ochepa ngati asinthidwa. Kusinthaku kukuwonetsa zofunikira zatsopano zomwe zalembedwa muzolemba zatsopano.
• Kuletsa kutsekereza kwa ma URL a iframe omwe akulozera pamafayilo am'deralo ("filesystem://").
• Kuti mufulumizitse kutsitsa kwamasamba, kukhathamiritsa kwatsopano kwawonjezeredwa komwe kumatsimikizira kuti kulumikizana ndi omwe akuwongolera kumakhazikitsidwa mukangodina ulalo, osadikirira kuti mutulutse batani kapena chotsani chala chanu pazenera logwira.
• Makonda owonjezera owongolera "Topics & Interest Group" API, yokwezedwa ngati gawo la Privacy Sandbox initiative, yomwe imakupatsani mwayi wofotokozera magulu omwe amakonda ndikuwagwiritsa ntchito m'malo motsatira ma Cookies kuti azindikire magulu a ogwiritsa ntchito omwe ali ndi zokonda zofananira popanda kuzindikiritsa ogwiritsa ntchito. . Kuphatikiza apo, ma dialog a chidziwitso omwe amawonetsedwa kamodzi awonjezedwa, kufotokozera wogwiritsa ntchito tanthauzo laukadaulo ndikupereka kuti ayambitse chithandizo chake pazosintha.
• Kuchulukirachulukira kuti muchepetse mafoni omwe aikidwa mu setTimeout ndi setInterval timer idayamba ndi nthawi yotchulidwa yosakwana 4 ms ("setTimeout(…, <4ms)"). Malire okwana pama foni otere awonjezeka kuchokera ku 5 mpaka 100, zomwe zimapangitsa kuti musamachepetse mafoni amtundu uliwonse, koma nthawi yomweyo muteteze nkhanza zomwe zingakhudze ntchito ya osatsegula.
• Yatsegulidwa kutumiza pempho lotsimikizira zilolezo za CORS (Cross-Origin Resource Sharing) ku seva yayikulu ya tsamba ndi mutu wa "Access-Control-Request-Private-Network: true" tsamba likafika pa subresource pa netiweki yamkati (192.168.xx, 10.xxx, 172.16-31.xx) kapena localhost (127.xxx). Potsimikizira ntchitoyi, seva iyenera kubweza mutu wa "Access-Control-Allow-Private-Network: true" poyankha pempholi. Mu Chrome 104, zotsatira zotsimikizira sizikukhudzabe kukonza pempho - ngati chitsimikizo sichinaperekedwe, chenjezo limawonetsedwa mu web console, koma pempho la subresource lokha silinatsekedwe. Kutsegula kuletsa popanda chitsimikizo kuchokera Seva Izi sizikuyembekezeka mpaka Chrome 107. Kuti muyambitse kuletsa m'makanema akale, mutha kuyatsa makonda a "chrome://flags/#private-network-access-respect-preflight-results".

  Kutsimikizira ulamuliro Seva Mbali imeneyi idayambitsidwa kuti ilimbikitse chitetezo ku ziwopsezo zomwe zimapeza zinthu pa netiweki yakomweko kapena pa kompyuta ya wogwiritsa ntchito (localhost) kuchokera ku zolemba zomwe zayikidwa potsegula tsamba lawebusayiti. Mapempho oterewa amagwiritsidwa ntchito ndi owukira kuchita ziwopsezo za CSRF pa ma rauta, malo olowera, ma printers, ma web interfaces amakampani, ndi zida zina ndi ntchito zomwe zimangolandira zopempha kuchokera ku netiweki yakomweko. Kuti ateteze ku ziwopsezo zotere, akamapeza zinthu zilizonse pa netiweki yamkati, msakatuli adzatumiza pempho lomveka bwino la chilolezo chotsegula zinthuzi.
• Makina a Region Capture awonjezedwa omwe amakulolani kuti muchepetse zosafunikira kuchokera pa kanema wopangidwa kutengera kujambula. Mwachitsanzo, pogwiritsa ntchito getDisplayMedia API, pulogalamu yapaintaneti imatha kuyendetsa kanema wazomwe zili patsamba, ndipo Region Capture imakupatsani mwayi wodula gawo lomwe limaphatikizapo zowongolera pamisonkhano yamakanema.
• Thandizo lowonjezera pamawu atsopano azama media omwe amafotokozedwa mu Media Queries Level 4 mafotokozedwe, omwe amatsimikizira kukula kochepa komanso kokwanira kwa malo owoneka (mawonedwe). Mawu atsopanowa amakupatsani mwayi wogwiritsa ntchito ofananitsa masamu wamba ndi ogwiritsa ntchito zomveka monga "ayi", "kapena" ndi "ndi". Mwachitsanzo, m'malo mwa "@media (min-width: 400px) { ... }" mutha kutchula "@media (width >= 400px) { ... }".
• Ma API angapo atsopano awonjezedwa ku Origin Trials mode (zoyeserera zomwe zimafunikira kuyatsa kosiyana). Origin Trial amatanthauza kuthekera kogwira ntchito ndi API yotchulidwa kuchokera ku mapulogalamu omwe adatsitsidwa kuchokera ku localhost kapena 127.0.0.1, kapena mutalembetsa ndi kulandira chizindikiro chapadera chomwe chili chovomerezeka kwa nthawi yochepa pa tsamba linalake.
  • Onjezani katundu wa CSS "focusgroup" kuti muwongolere mayendedwe pogwiritsa ntchito makiyi a mivi pa kiyibodi.
  • Secure Payment Confirmation API imapereka kuthekera kwa wogwiritsa ntchito kuletsa sitolo yosungiramo kirediti kadi. Kuti muwonetse zokambirana zomwe zimakulolani kukana kusunga magawo a kirediti kadi, wopanga PaymentRequest() amapereka mbendera ya "showOptOut: true".
  • Anawonjezera Shared Element Transitions API, yomwe imakupatsani mwayi wokonza kusintha kosavuta pakati pa mawonedwe osiyanasiyana pamasamba atsamba limodzi.
• Thandizo la malamulo a Speculation lakhazikika, kulola olemba mawebusayiti kuti apatse msakatuli zambiri zamasamba omwe atha kupitako. Msakatuli amagwiritsa ntchito izi kuti atsegule ndikupereka zomwe zili patsamba.
• Makina opangira zida zazing'ono m'mapaketi mumtundu wa Web Bundle adakhazikika, kulola kukulitsa luso lotsitsa mafayilo ambiri otsagana nawo (ma CSS masitaelo, JavaScript, zithunzi, iframes). Mosiyana ndi phukusi lamtundu wa Webpack, mawonekedwe a Web Bundle ali ndi zotsatirazi: si phukusi lokha lomwe limasungidwa mu cache ya HTTP, koma zigawo zake; kuphatikiza ndi kupha JavaScript kumayamba osadikirira kuti phukusi litsitsidwe kwathunthu; Zimaloledwa kuphatikiza zina zowonjezera monga CSS ndi zithunzi, zomwe mu webpack ziyenera kusungidwa mu mawonekedwe a zingwe za JavaScript.
• Anawonjezera chinthu-mawonedwe-bokosi katundu CSS, amene amakulolani kufotokoza gawo la fano limene lidzawonetsedwa m'deralo m'malo mwa chinthu chopatsidwa, chomwe chingagwiritsidwe ntchito, mwachitsanzo, kuwonjezera malire kapena mthunzi.
• Yowonjezera Fullscreen Capability Delegation API, kulola chinthu chimodzi cha Window kuti chipereke ku Window china ufulu woyimba requestFullscreen().
• Wonjezerani Fullscreen Companion Window API, kulola zomwe zili pazenera zonse ndi ma popups kuti aziyikidwe pazenera lina atalandira chitsimikiziro kuchokera kwa wogwiritsa ntchito.
• Mawonekedwe a bokosi lowoneka awonjezedwa ku katundu wa CSS osefukira-clip-margin, omwe amasankha komwe angayambire kudula zomwe zimadutsa malire aderalo (zimatha kutenga zomwe zili mubokosi, padding-box ndi malire- bokosi).
• Async Clipboard API yawonjezera kuthekera kofotokozera mawonekedwe apadera a data yomwe imasamutsidwa kudzera pa clipboard, kupatula zolemba, zithunzi, ndi zolemba zokhala ndi zolembera.
• WebGL imapereka chithandizo chofotokozera malo amtundu wa render buffer ndikusintha potumiza kuchokera ku mawonekedwe.
• Chithandizo cha OS X 10.11 ndi nsanja zina zaposachedwa chayimitsidwa. macOS 10.12.
• U2F (Cryptotoken) API, yomwe idatsitsidwa kale ndikuyimitsidwa mwachisawawa, yathetsedwa. U2F API yasinthidwa ndi Web Authentication API.
• Kuwongolera kwapangidwa kwa zida za opanga mawebusayiti. Wotsutsa tsopano ali ndi mphamvu yoyambitsanso kachidindo kuyambira pachiyambi cha ntchito pambuyo pogunda malo opuma kwinakwake mu thupi la ntchito. Thandizo lowonjezera popanga zowonjezera za gulu la Recorder. Thandizo lowonera zizindikiro zomwe zakhazikitsidwa mu pulogalamu yapaintaneti poyimba njira ya performance.measure() yawonjezedwa ku gulu lowunikira magwiridwe antchito. Malingaliro awongoleredwa pakumalizitsa zinthu za JavaScript. Mukamaliza zosintha za CSS, zowoneratu zamtengo wosagwirizana ndi mitundu zimaperekedwa.

Kuphatikiza pazatsopano ndi kukonza zolakwika, mtundu watsopano umachotsa zovuta 27. Zofooka zambiri zidadziwika chifukwa choyesera zokha pogwiritsa ntchito AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer ndi zida za AFL. Palibe zovuta zomwe zadziwika zomwe zingalole kuti munthu adutse milingo yonse yachitetezo cha asakatuli ndikuyika ma code padongosolo kunja kwa sandbox. Monga gawo la pulogalamu yolipira ndalama pozindikira zovuta zomwe zatulutsidwa pano, Google idapereka mphotho 22 zokwana $84 (mphotho imodzi ya $15000, mphotho imodzi ya $10000, mphotho imodzi ya $8000, mphotho imodzi ya $7000, mphotho zinayi za $5000, mphotho imodzi ya $4000 , mphoto zinayi za $3000, ndi mphoto zitatu za $2000). Kukula kwa mphotho imodzi sikunadziwikebe.

Source: opennet.ru