Kutulutsidwa kwa Chrome 83

Google представила kumasulidwa kwa msakatuli Chrome 83... Nthawi imodzi zilipo kutulutsidwa kokhazikika kwa projekiti yaulere Chromium, yomwe imakhala ngati maziko a Chrome. Msakatuli wa Chrome chosiyana kugwiritsa ntchito ma logo a Google, kukhalapo kwa dongosolo lotumizira zidziwitso pakagwa ngozi, kutha kutsitsa gawo la Flash mukapempha, ma module osewera otetezedwa (DRM), kachitidwe kokhazikitsa zokha zosintha ndi kufalitsa pakufufuza. Zithunzi za RLZ. Chifukwa chakusintha kwa otukula kuti azigwira ntchito kunyumba mkati mwa mliri wa SARS-CoV-2 coronavirus, kutulutsidwa kwa Chrome 82 kudachedwa. anaphonya. Kutulutsidwa kotsatira kwa Chrome 84 kuyenera kuchitika pa Julayi 14.

waukulu kusintha в Chrome 83:

• Anayamba kuphatikiza misa DNS pamtundu wa HTTPS (DoH, DNS pa HTTPS) pamakina ogwiritsira ntchito omwe machitidwe awo amafotokozera opereka DNS omwe amathandizira DoH (DoH ya wothandizira DNS yemweyo idzayatsidwa). Mwachitsanzo, ngati wosuta ali ndi DNS 8.8.8.8 yotchulidwa pazikhazikiko zamakina, ndiye kuti ntchito ya Google ya DoH (“https://dns.google.com/dns-query”) idzayatsidwa mu Chrome; ngati DNS ndi 1.1.1.1. XNUMX, kenako ntchito ya DoH Cloudflare ("https://cloudflare-dns.com/dns-query"), ndi zina zotero. Kuthetsa mavuto pakuthetsa ma intranet amakampani, DoH simagwiritsidwa ntchito pozindikira kagwiritsidwe ntchito ka msakatuli pamakina omwe amayendetsedwa ndi boma. DoH imayimitsidwanso ngati njira zowongolera makolo zilipo.
  Kuwongolera kuyatsa kwa DoH ndikusintha woperekera DoH kumachitika kudzera muzosintha zokhazikika.
  

• Zolinga zatsopano kapangidwe zinthu mafomu apaintaneti omwe akonzedwa kuti agwiritsidwe ntchito pa zowonera ndi makina a anthu olumala. Mapangidwewo adakonzedwa ndi Microsoft monga gawo la chitukuko cha msakatuli wa Edge ndikusamutsira ku Chromium codebase yayikulu. M'mbuyomu, mawonekedwe ena adapangidwa kuti agwirizane ndi machitidwe opangira, ndipo ena adapangidwa kuti agwirizane ndi masitayelo otchuka kwambiri. Chifukwa cha izi, zinthu zosiyanasiyana zidali zoyenera mosiyanasiyana pazowonera, makina olumala, ndi zowongolera kiyibodi. Cholinga cha rework chinali kugwirizanitsa mapangidwe a mawonekedwe a mawonekedwe ndikuchotsa kusagwirizana kwa kalembedwe.
  

• Mapangidwe a gawo la "Zazinsinsi ndi Chitetezo" asinthidwa. anawonjezera zida zatsopano zoyendetsera chitetezo. Zokonda tsopano ndizosavuta kupeza komanso zosavuta kuzimvetsetsa. Magawo anayi ofunikira amaperekedwa, omwe ali ndi zida zokhudzana ndi kuchotsa mbiri yakale, kuyang'anira Ma Cookies ndi data ya tsamba, njira zachitetezo ndi zoletsa kapena zilolezo zolumikizidwa ndi masamba enaake. Wogwiritsa ntchito amatha kuloleza kutsekereza kwa ma Cookies a chipani chachitatu pamawonekedwe a incognito kapena masamba onse, kapena kuletsa ma Cookies onse patsamba linalake. Mapangidwe atsopanowa amayatsidwa pamakina a ogwiritsa ntchito ena okha; ena amatha kuyambitsa zosintha kudzera pa "chrome://flags/#privacy-settings-redesign".
  

  Zokonda zokhudzana ndi tsamba zimagawidwa m'magulu - kupeza malo, kamera, maikolofoni, zidziwitso ndi kutumiza deta yakumbuyo. Palinso gawo lomwe lili ndi makonda owonjezera oletsa JavaScript, zithunzi ndikusinthanso pamasamba ena. Zochita zomaliza zomwe zikugwirizana ndi kusintha zilolezo zimawonetsedwa mosiyana.

  

• Mu mawonekedwe a incognito, kutsekereza ma Cookies onse okhazikitsidwa ndi masamba ena, kuphatikiza maukonde otsatsa ndi makina osanthula pa intaneti, kumayatsidwa mwachisawawa. Mawonekedwe okulirapo owongolera kukhazikitsa ma Cookies pamasamba amaperekedwanso. Kuti muwongolere, mbendera "chrome://flags/#improved-cookie-controls" ndi "chrome://flags/#improved-cookie-controls-for-third-party-cookie-blocking" zimaperekedwa. Pambuyo poyambitsa mawonekedwewo, chithunzi chatsopano chikuwonekera mu bar ya adilesi; mukadina, kuchuluka kwa ma Cookies otsekedwa kumawonetsedwa ndipo mwayi woletsa kutsekereza umaperekedwa. Mutha kuwona ma Cookies omwe amaloledwa ndikutsekeredwa patsamba lomwe lilipo mugawo la "Cookies" pamindandanda yankhaniyo, loyitanitsidwa ndikudina chizindikiro cha loko mu adilesi, kapena pazokonda.
  
  

• Zokonda zimapatsa batani latsopano la "Check Safety", lomwe limapereka chidule cha zovuta zachitetezo, monga kugwiritsa ntchito mawu achinsinsi osokonekera, momwe mungayang'anire malo oyipa (Kusakatula Kwachitetezo), kupezeka kwa zosintha zosatulutsidwa komanso kuzindikiritsa zowonjeza zoyipa. -onse.
  

• Woyang'anira mawu achinsinsi wawonjezera luso macheke ma logins onse osungidwa ndi mapasiwedi kuchokera ku database ya maakaunti osokonekera okhala ndi chenjezo lowonetsedwa ngati mavuto apezeka (kuyang'ana kumachitika poyang'ana chizindikiro cha hashi kumbali ya wogwiritsa ntchito; mawu achinsinsi okha ndi ma hashes awo onse samatumizidwa kunja). Chekecho chimachitika motsutsana ndi nkhokwe yomwe ili ndi maakaunti opitilira 4 biliyoni omwe adawonekera m'malo osungidwa a ogwiritsa ntchito. Chenjezo limawonekeranso poyesa kugwiritsa ntchito mawu achinsinsi ngati "abc123".
  

• Yovomerezedwa ndi chitetezo chowonjezereka kumawebusayiti owopsa (Kusakatula Kwachitetezo Chowonjezera), komwe kumayambitsa macheke owonjezera kuti atetezedwe ku chinyengo, zochitika zoyipa ndi ziwopsezo zina zapa intaneti. Chitetezo chowonjezera chimagwiritsidwanso ntchito pa akaunti yanu ya Google ndi ntchito za Google (Gmail, Drive, etc.). Ngati cheke mumayendedwe a Safe Browsing amachitidwa kwanuko pogwiritsa ntchito database yomwe imayikidwa nthawi ndi nthawi pamakina a kasitomala, ndiye kuti mu Kusakatula Kwachitetezo Kowonjezera zambiri zamasamba ndi kutsitsa munthawi yeniyeni zimatumizidwa ku Google Safe Browsing service kuti zitsimikizidwe ku mbali ya Google, zomwe. amakulolani kuti muyankhe mwamsanga kuopseza mwamsanga pambuyo podziwika, popanda kuyembekezera kuti mndandanda wakuda waderalo usinthe.

  Kuti mufulumizitse ntchito, imathandizira kuyang'ana chisanadze motsutsana ndi whitelists, zomwe zimaphatikizapo ma hashes a masauzande ambiri otchuka, odalirika. Ngati tsamba lomwe likutsegulidwa silili pamndandanda woyera, msakatuli amayang'ana ulalo pa seva ya Google, ndikutumiza ma bits 32 oyambilira a SHA-256 hash ya ulalo, momwe zotheka zamunthu zimadulidwa. Malinga ndi Google, njira yatsopanoyi ikhoza kupititsa patsogolo machenjezo a malo atsopano achinyengo ndi 30%.

• M'malo mongoyika zithunzi zowonjezera pafupi ndi adilesi, mndandanda watsopano wakhazikitsidwa, wowonetsedwa ndi chithunzi chazithunzi, chomwe chimalemba zonse zomwe zilipo ndi mphamvu zawo. Pambuyo poyika chowonjezera, wogwiritsa ntchito ayenera tsopano kuwonetsa chithunzi chowonjezera kuti chikhomedwe pagulu, ndikuwunikanso zilolezo zomwe zaperekedwa pazowonjezera. Kuonetsetsa kuti chowonjezera sichikutayika, mwamsanga mutangokhazikitsa chizindikiro chikuwonetsedwa ndi chidziwitso chowonjezera chatsopano. Menyu yatsopanoyo imayatsidwa mwachisawawa kwa ena mwa ogwiritsa ntchito, ena amatha kuyigwiritsa ntchito "chrome://flags/#extensions-toolbar-menu".
  

• Onjezani zochunira za “chrome://flags/#omnibox-context-menu-show-full-urls”, zitayatsidwa, chinthu cha “Onetsani ulalo wonse” chimawonekera pagawo la menyu adiresi, kuletsa kupotoza kwa ulalo. Tikumbukire kuti mu Chrome 76 bar ya adilesi idamasuliridwa mwachisawawa kuti iwonetse maulalo opanda "https://", "http://" ndi "www.". Panali makonzedwe oletsa khalidweli, koma mu Chrome 79 adachotsedwa ndipo ogwiritsa ntchito adataya mphamvu yowonetsera ulalo wathunthu mu bar adilesi.
  

• Kwa ogwiritsa ntchito onse, ntchito yogawa ma tabu ("chrome://flags/#tab-groups") imayatsidwa, zomwe zimakulolani kuphatikiza ma tabo angapo okhala ndi zolinga zofanana m'magulu olekanitsidwa ndi maso. Gulu lirilonse likhoza kupatsidwa mtundu wake ndi dzina. Kuonjezera apo, njira yoyesera ya magulu akugwa ndi kukulitsa yaperekedwa, yomwe sikugwirabe ntchito pa machitidwe onse. Mwachitsanzo, nkhani zingapo zomwe sizinawerengedwe zimatha kukomoka kwakanthawi, ndikusiya chizindikiro chokha kuti zisatenge malo poyenda, ndikubwerera kumalo awo pobwerera ku kuwerenga. Kuti mutsegule, zochunira zoperekedwa ndi "chrome://flags/#tab-groups-collapse".
  

• Machenjezo amayatsidwa mwachisawawa poyesa kutero boot osatetezeka (popanda encryption) mafayilo omwe angathe kuchitidwa kudzera pa maulalo amasamba a HTTPS (mu Chrome 84, kutsitsa kwamafayilo omwe angathe kuchitika kudzatsekedwa, ndipo chenjezo lidzayamba kuperekedwa pazosungidwa). Zimadziwika kuti kutsitsa mafayilo popanda kubisa kungagwiritsidwe ntchito kuchita zinthu zoyipa kudzera m'malo mwa zomwe zili pamasewera a MITM. Komanso zoletsedwa kutsitsa kwamafayilo kumayambira pamabuloko akutali a iframe.
• Mukatsegula Adobe Flash, uthenga wochenjeza wawonjezedwa wosonyeza kuti chithandizo chaukadaulochi chitha mu Disembala 2020.
• Tekinoloje yakhazikitsidwa Mitundu yodalirika, zomwe zimakulolani kuti mutseke chinyengo cha DOM chomwe chimatsogolera ku scripting-site (DOM XSS), mwachitsanzo, pamene mukulakwitsa molakwika deta yomwe inalandira kuchokera kwa wogwiritsa ntchito mu eval () midadada kapena ".innerHTML" kuika, zomwe zingayambitse JavaScript code kukhala kuchitidwa mogwirizana ndi tsamba linalake. Mitundu yodalirika imafuna kukonzedwanso kwa data isanaperekedwe kuzinthu zoopsa. Mwachitsanzo, mitundu yodalirika ikayatsidwa, kuchita "anElement.innerHTML = location.href" kumabweretsa cholakwika ndipo pamafunika kugwiritsa ntchito zinthu zapadera za TrustedHTML kapena TrustedScript pogawa. Kuyatsa Mitundu Yodalirika kumachitika pogwiritsa ntchito CSP (Content-Security-Policy).
• Zowonjezedwa New Cross-Origin-Embedder-Policy ndi Cross-Origin-Opener-Policy HTTP mitu kuti athe njira yapadera yodzipatula kuti igwiritse ntchito tsamba lamwayi monga SharedArrayBuffer, Performance.measureMemory() ndi ma API ofotokozera omwe angakhale amagwiritsidwa ntchito kuchita ziwonetsero zakumbali monga Specter. Njira yodzipatula yosiyana-siyana sikukulolani kuti musinthe katundu wa document.domain.
• Kukhazikitsa kwatsopano kachitidwe kowunika momwe zinthu ziliri pamanetiweki akukonzedwa - OOR-CORS (Out-Of-Renderer Cross-Origin Resource Sharing). Kukhazikitsa kwakale kukanangoyang'ana zigawo zazikulu za injini ya Blink, XHR ndi Fetch API, koma sizinafotokoze zopempha za HTTP zopangidwa kuchokera ku ma modules ena amkati. Kukhazikitsa kwatsopano kumathetsa vutoli.
• Ma API angapo atsopano awonjezedwa ku Origin Trials mode (zoyeserera zomwe zimafunikira kuyatsa kosiyana). Origin Trial amatanthauza kuthekera kogwira ntchito ndi API yotchulidwa kuchokera ku mapulogalamu omwe adatsitsidwa kuchokera ku localhost kapena 127.0.0.1, kapena mutalembetsa ndi kulandira chizindikiro chapadera chomwe chili chovomerezeka kwa nthawi yochepa pa tsamba linalake.
  • API Native File System, zomwe zimakupatsani mwayi wopanga mapulogalamu a pa intaneti omwe amalumikizana ndi mafayilo amafayilo am'deralo. Mwachitsanzo, API yatsopano ikhoza kufunidwa m'malo otukuka ophatikizidwa ndi osatsegula, zolemba, zithunzi ndi makanema osintha. Kuti muthe kulemba mwachindunji ndi kuwerenga mafayilo, gwiritsani ntchito ma dialogs kuti mutsegule ndi kusunga mafayilo, komanso fufuzani zomwe zili m'mabuku, pulogalamuyi imapempha wogwiritsa ntchito kuti atsimikizire mwapadera;
  • Njira Performance.measureMemory() kuyerekeza kugwiritsa ntchito kukumbukira pokonza pulogalamu yapaintaneti kapena tsamba lawebusayiti. Itha kugwiritsidwa ntchito kusanthula ndi kukhathamiritsa kugwiritsa ntchito kukumbukira pamawebusayiti, komanso kuzindikira kuchulukirachulukira kwamakumbukiro.
  • Njira Preoritized Scheduler.postTask() pakukonzekera ntchito (ma JavaScript callbacks) okhala ndi magawo osiyanasiyana (amaletsa ntchito ya ogwiritsa ntchito, amapanga zosintha zowoneka ndi ntchito yakumbuyo). Mutha kugwiritsa ntchito chinthu cha TaskController kuti musinthe zoyambira ndikuletsa ntchito.
  • API Mitsinje ya WebRTC Insetable. Mwachitsanzo, API ikhoza kugwiritsidwa ntchito popereka kubisa komaliza mpaka kumapeto kwa mitsinje yomwe imafalitsidwa kudzera pa seva yapaulendo.
• API Yowonjezera Kuzindikira kwa Barcode kuzindikira ndi kusiyanitsa ma barcode mu chithunzi china. API imagwira ntchito pazida za Android zokha zomwe Google Play Services idayika.
• Wowonjezera meta tag mtundu-chiwembu, kulola malowa kuti apereke chithandizo chokwanira pamutu wamdima popanda kugwiritsa ntchito kusintha kwa CSS.
• Adawonjezera kuthekera kogwiritsa ntchito ma module a JavaScript mu wogwira nawo ntchito.
• Mu IndexedDB IBDDatabase.transaction() mkangano watsopano wawonjezeredwa
  "durability", zomwe zimakupatsani mwayi wowongolera kukonzanso kwa data pagalimoto. Popereka mtengo "womasuka" m'malo mwa "okhazikika" mode, mutha kusiya kudalirika chifukwa chogwira ntchito (kale Chrome nthawi zonse inkatsitsa deta ku diski ikatha kulemba chilichonse).

• Added @supports function to selector() kukulolani kuti muwone kupezeka kwa osankha CSS (mwachitsanzo, mutha kuyang'ana kaye kupezeka kwa chosankha musanamange masitayilo a CSS).

  @imathandizira chosankha(::pambuyo) {
  div { background: green};
  }

• Mu Intl.DateTimeFormat anawonjezera gawo la fractionalSecondDigits kuti mukonze mawonekedwe owonetsera masekondi.
• injini V8 fulumira kutsatira ArrayBuffer mu otolera zinyalala. Ma module a WebAssembly amaloledwa kupempha mpaka 4 GB ya kukumbukira.
• Zowonjezedwa zida zatsopano zopangira mawebusayiti. Mwachitsanzo, mawonekedwe awoneka kuti akutsanzira momwe tsamba limawonera ndi anthu omwe sawona bwino komanso akhungu amitundu yosiyanasiyana. Njira yotsanzira zosintha zamalo awonjezedwa, kusintha komwe kumakhudza API Intl.*, *.prototype.toLocaleString, navigator.language, Accept-Language, etc.
  

  The COEP (Cross-Origin Embedder Policy) debugger yawonjezedwa ku mawonekedwe owunikira zochitika pa netiweki, kukulolani kuti muwone zifukwa zoletsera kutsitsa kwazinthu zina pamaneti. Onjezani mawu ofunikira a cookie-path kuti musefa zopempha zomwe Cookie imayenera kutsata njira.

  

  Anawonjezera njira yokhotakhota pazida zopanga kumanzere kwa chinsalu.
  

  

  Mawonekedwe otsatirira ma code a JavaScript omwe adakhala nthawi yayitali akonzedwanso.
  

  

• Chifukwa cha COVID-19, zosintha zina zomwe zidakonzedwa zidayimitsidwa. Mwachitsanzo, Kuchotsa code yogwira ntchito ndi FTP kukonzedwanso mpaka kalekale. Kukhazikika kuthandizira ma protocol a TLS 1.0/1.1 kuchedwetsedwa isanatulutsidwe Chrome 84. Poyamba
  kuthandizira kwa Client Hints identifier (m'malo mwa User-Agent) nawonso kuchedwetsedwa mpaka Chrome 84. Gwirani ntchito Kulumikizana kwa User-Agent idaimitsidwa mpaka chaka chamawa.

Kuphatikiza pazatsopano ndi kukonza zolakwika, mtundu watsopano umatha 38 zofooka. Zofooka zambiri zidadziwika chifukwa choyesa makina pogwiritsa ntchito zida AddressSanitizer, MemorySanitizer, Control Flow Umphumphu, LibFuzzer и AFL. Palibe zovuta zomwe zadziwika zomwe zingalole kuti munthu adutse milingo yonse yachitetezo cha asakatuli ndikuyika ma code padongosolo kunja kwa sandbox. Monga gawo la pulogalamu yolipira ndalama pozindikira zovuta zomwe zatulutsidwa pano, Google idapereka mphotho 28 zokwana $76 (mphotho imodzi ya $20000, mphotho imodzi ya $10000, mphotho ziwiri za $7500, mphotho ziwiri za $5000, mphotho ziwiri za $3000, mphotho ziwiri za $2000, mphotho ziwiri za $1000 ndi mphoto zisanu ndi zitatu za $500). Kukula kwa mphotho 7 sikunadziwikebe.

Source: opennet.ru