Google kumasulidwa kwa msakatuli ... Nthawi imodzi kutulutsidwa kokhazikika kwa projekiti yaulere , yomwe imakhala ngati maziko a Chrome. Msakatuli wa Chrome kugwiritsa ntchito ma logo a Google, kukhalapo kwa dongosolo lotumizira zidziwitso pakagwa ngozi, kutha kutsitsa gawo la Flash mukapempha, ma module osewera otetezedwa (DRM), kachitidwe kokhazikitsa zokha zosintha ndi kufalitsa pakufufuza. . Kutulutsidwa kotsatira kwa Chrome 85 kuyenera kuchitika pa Ogasiti 25.
:
- kuthandizira ma protocol a TLS 1.0 ndi TLS 1.1. Kuti mupeze masamba panjira yolumikizirana yotetezeka, seva iyenera kupereka chithandizo cha TLS 1.2 osachepera, apo ayi msakatuli awonetsa cholakwika. Malinga ndi Google, pakali pano pafupifupi 0.5% yotsitsa masamba akupitilizabe kupangidwa pogwiritsa ntchito mitundu yakale ya TLS. Kutsekedwa kunachitika motsatira IETF (Internet Engineering Task Force). Chifukwa chokanira TLS 1.0 / 1.1 ndi kusowa kwa chithandizo cha ma ciphers amakono (mwachitsanzo, ECDHE ndi AEAD) komanso kufunikira kothandizira ma ciphers akale, kudalirika komwe kumakayikiridwa pakali pano pakukula kwaukadaulo wamakompyuta (mwachitsanzo. , kuthandizira kwa TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA ndikofunikira, MD5 ndi SHA-1). Zokonda zololeza kubwerera ku TLS 1.0/1.1 zidzasungidwa mpaka Januware 2021.
- Kuletsa kwaperekedwa (popanda encryption) yamafayilo omwe angathe kuchitidwa ndi machenjezo owonjezera mukamatsitsa zakale mosatetezeka. M'tsogolomu, zikukonzekera kusiya pang'onopang'ono kuthandizira kukweza mafayilo popanda kubisa. Kutsekereza kumayendetsedwa chifukwa kutsitsa mafayilo popanda kubisa kungagwiritsidwe ntchito kuchita zoyipa posintha zomwe zili mkati mwa MITM.
- chithandizo choyamba , yopangidwa ngati m'malo mwa mutu wa User-Agent. Makina a Client Hints amapereka mitu ya "Sec-CH-UA-*" monga cholowa m'malo mwa User-Agent, yomwe imakupatsani mwayi woti muthe kutengera zomwe mwasankha za msakatuli ndi magawo ena amtundu (mtundu, nsanja, ndi zina). pambuyo pempho la seva. Wogwiritsa amapeza mwayi wodziwa kuti ndi magawo ati omwe ali ovomerezeka kuti aperekedwe ndikupereka chidziwitso chotere kwa eni malo. Mukamagwiritsa ntchito Malangizo a Makasitomala, chizindikiritso sichimaperekedwa mwachisawawa popanda kupempha mwachindunji, zomwe zimapangitsa kuti chizindikiritso chodziwikiratu kukhala chosatheka (mwachisawawa, dzina la osatsegula lokha limawonetsedwa). pa mpaka chaka chamawa.
- kutsegulira
okhwima kwambiri kusamutsa Cookies pakati pa malo, amene anali chifukwa cha COVID-19. Pazofunsira zomwe sizili za HTTPS, kukonza ma Cookies a chipani chachitatu omwe amayikidwa mukamapeza masamba ena kupatula dera lomwe lili patsamba lino ndikoletsedwa. Ma cookie oterowo amagwiritsidwa ntchito kutsata mayendedwe a ogwiritsa ntchito pakati pa masamba omwe ali mu code ya ma network otsatsa, ma widget ochezera pa intaneti ndi makina osanthula masamba.Kumbukirani kuti poyang'anira kutumiza kwa Ma Cookies, mawonekedwe a SameSite omwe atchulidwa pamutu wa Set-Cookie amagwiritsidwa ntchito, omwe mwachisawawa adzakhazikitsidwa ku mtengo wa "SameSite=Lax", womwe umalepheretsa kutumiza ma Cookies kuti afufuze zopempha zazing'ono. , monga kupempha chithunzi kapena kutsitsa zinthu kudzera pa iframe kuchokera patsamba lina. Mawebusayiti atha kupitilira machitidwe osakhazikika a SameSite pokhazikitsa ma Cookie kukhala SameSite=None. Kuphatikiza apo, mtengo wa SameSite=None for Cookie ukhoza kukhazikitsidwa munjira Yotetezeka (yovomerezeka kuti ilumikizidwe kudzera pa HTTPS). Kusinthaku kudzachitika pang'onopang'ono, kuyambira ndi owerengeka ochepa a ogwiritsa ntchito kenako ndikukulitsa kufikira kwake.
- Kukhazikitsa koyeserera kwawonjezeredwa , yomwe ingathe kuthandizidwa pogwiritsa ntchito "chrome://flags/#enable-heavy-ad-intervention". The blocker imakulolani kuti muyimitse zokha zotsatsa za iframe mutadutsa kuchuluka kwa magalimoto ndi kuchuluka kwa CPU. Kutsekereza kudzayambika ngati ulusi waukulu wadya masekondi opitilira 60 a CPU nthawi yonse kapena masekondi 15 pakapita mphindi 30 (kugwiritsa ntchito 50% yazinthu zopitilira masekondi 30), komanso kuposa 4 MB. data idatsitsidwa pa netiweki.
Kutsekereza kumangogwira ntchito ngati, malire asanadutse, wogwiritsa ntchito sanagwirizane ndi zotsatsa (mwachitsanzo, sanadutse pamenepo), zomwe, poganizira zoletsa zamagalimoto, zimalola kuseweredwa kwa magalimoto akuluakulu. mavidiyo akutsatsa kuti atsekedwe popanda wogwiritsa ntchito kuyambiranso kusewera. Njira zomwe zaperekedwazi zidzapulumutsa ogwiritsa ntchito kutsatsa ndikugwiritsa ntchito ma code osagwira ntchito bwino kapena kuchita dala za parasitic (mwachitsanzo, migodi). Malinga ndi ziwerengero za Google, kutsatsa komwe kumakwaniritsa njira zotsekereza kumapanga 0.30% yokha ya magawo onse otsatsa, koma nthawi yomweyo, zotsatsa zotere zimadya 28% yazinthu za CPU ndi 27% yamagalimoto kuchokera pazambiri zotsatsa.
- Ntchito yachitidwa kuti achepetse kugwiritsa ntchito zida za CPU pomwe zenera la osatsegula silili m'gawo la wogwiritsa ntchito. Chrome tsopano imayang'ana ngati zenera la msakatuli likupinidwa ndi mazenera ena ndikuletsa kujambula ma pixel m'malo omwe akudutsana. Zatsopanozi zidzatulutsidwa pang'onopang'ono: kukhathamiritsa kudzayatsidwa kwa ogwiritsa ntchito ena mu Chrome 84, ndi ena mu Chrome 85.
- Chitetezo chimayatsidwa ndi kusakhazikika , mwachitsanzo, sipamu ndi zopempha kuti mulandire zidziwitso zokankhira. Popeza zopempha zotere zimasokoneza ntchito ya wogwiritsa ntchito ndikusokoneza chidwi pazochita zotsimikizira, m'malo mwa kukambirana kosiyana mu bar ya adilesi, chidziwitso chomwe sichifuna kuchitapo kanthu kuchokera kwa wogwiritsa ntchito chidzawonetsedwa ndi chenjezo kuti pempho la zilolezo latsekedwa. , yomwe imachepetsedwa kukhala chizindikiro chokhala ndi chithunzi cha belu lodutsa. Mwa kuwonekera pa chizindikiro, mukhoza yambitsa kapena kukana chilolezo anapempha nthawi iliyonse yabwino.
- Chisankho cha wogwiritsa ntchito chimakumbukiridwa potsegula zogwirira ntchito zakunja - wogwiritsa ntchito amatha kusankha "nthawi zonse kulola tsamba ili" kwa chogwirizira chapadera ndipo msakatuli adzakumbukira chisankhochi mogwirizana ndi tsamba lomwe lilipo.
- Chitetezo chowonjezera posintha zosintha za ogwiritsa ntchito popanda chilolezo chowonekera. Ngati chowonjezera chikusintha injini yosakira kapena tsamba lomwe likuwonetsedwa pa tabu yatsopano, msakatuli tsopano akuwonetsa zokambirana ndikukupemphani kuti mutsimikize zomwe mwachita kapena kuletsa kusintha.
- kukhazikitsa chitetezo pakutsitsa zosakanikirana zama multimedia (pamene zothandizira zakwezedwa patsamba la HTTPS kudzera pa http:// protocol). Pamasamba otsegulidwa kudzera pa HTTPS, maulalo a "http://" tsopano asinthidwa ndi "https://" m'mabotolo olumikizidwa ndi kutsitsa zithunzi (zolemba ndi ma iframe zidasinthidwa m'malo, m'malo mwa ma audio ndi makanema akuyembekezeka mu kumasulidwa kotsatira). Ngati chithunzi sichipezeka kudzera pa https, ndiye kuti kutsitsa kwake kwatsekedwa (mutha kuyika chizindikiro pamanja poletsa kudzera pamenyu yomwe ikupezeka kudzera pachizindikiro cha loko mu bar ya adilesi).
- Thandizo lowonjezera la API (yopangidwa ngati SMS Receiver API), yomwe imakulolani kuti mukonzekere kulowa kwa mawu achinsinsi a nthawi imodzi patsamba lawebusayiti mutalandira uthenga wa SMS wokhala ndi nambala yotsimikizira yoperekedwa ku foni yam'manja ya Android yomwe msakatuli akugwira. Chitsimikizo cha SMS, mwachitsanzo, chingagwiritsidwe ntchito kutsimikizira nambala yafoni yotchulidwa ndi wogwiritsa ntchito panthawi yolembetsa. Ngati m'mbuyomu wogwiritsa ntchito amayenera kutsegula pulogalamu ya SMS, kukopera kachidindo kuchokera pa clipboard, kubwerera kwa osatsegula ndikuyika nambala iyi, ndiye kuti API yatsopano imapangitsa kuti izi zitheke ndikuchepetsa kukhudza kumodzi.
- API yowonjezera
kuwongolera kusewera kwa makanema ojambula pa intaneti. Kutulutsidwa kwatsopano kumawonjezera kuthandizira pakupanga ntchito, kukulolani kuti muwongolere momwe zotsatira zimaphatikizidwira ndikupereka othandizira atsopano omwe amatchedwa zochitika zosinthira zomwe zili m'malo. Web Animations API tsopano ikuthandizira Promise kuti afotokoze momwe makanema amasonyezera ndikuwongolera bwino momwe makanema ojambula amalumikizirana ndi mawonekedwe ena apulogalamu. - Ma API angapo atsopano awonjezedwa ku Origin Trials mode (zoyeserera zomwe zimafunikira kuyatsa kosiyana). Origin Trial amatanthauza kuthekera kogwira ntchito ndi API yotchulidwa kuchokera ku mapulogalamu omwe adatsitsidwa kuchokera ku localhost kapena 127.0.0.1, kapena mutalembetsa ndi kulandira chizindikiro chapadera chomwe chili chovomerezeka kwa nthawi yochepa pa tsamba linalake.
- API kwa ogwira ntchito kuti apeze ma Cookies a HTTP, akugwira ntchito ngati njira ina yogwiritsira ntchito document.cookie.
- API kuti muzindikire kusagwira ntchito kwa wogwiritsa ntchito, kukulolani kuti muzindikire nthawi yomwe wogwiritsa ntchito sakugwirizana ndi kiyibodi / mbewa, chophimba chowonetsera chikugwira ntchito, chinsalu chatsekedwa, kapena ntchito ikuchitika pa polojekiti ina. Kudziwitsa ntchito za kusagwira ntchito kumachitika potumiza zidziwitso mukafika pachiwopsezo chodziwika.
- Njira , amalola wopanga mapulogalamu kuti agwiritse ntchito kudzipatula kwathunthu kwazomwe akukonza mwanjira yosiyana molingana ndi gwero (chiyambi - domain + port + protocol), m'malo mwa tsambalo, pamtengo wosiya kuthandizira pazinthu zina za cholowa, monga synchronous. kugwiritsa ntchito zolemba pogwiritsa ntchito document.domain ndi kuitana postMessage() kutumiza mauthenga ku WebAssembly.Module zochitika. Mwa kuyankhula kwina, Origin Isolation imakulolani kuti mukonzekere kulekanitsa pakati pa njira zosiyanasiyana kutengera dera lachidziwitso, osati malo omwe ali ndi zowonjezera zowonjezera pamasamba.
- API pakugwiritsa ntchito malangizo a vector SIMD pamapulogalamu mumtundu wa WebAssembly. Kuti zitsimikizire kudziyimira pawokha papulatifomu, imapereka mtundu watsopano wa 128-bit womwe umayimira mitundu yosiyanasiyana ya data yodzaza, ndi magwiridwe antchito angapo ofunikira pokonza deta yodzaza. SIMD imakulolani kuti muwonjezere zokolola pofananiza kukonzanso deta ndipo zidzakhala zothandiza polemba ma code anu ku WebAssembly. Kuti muthandizire thandizo la SIMD, mutha kugwiritsa ntchito "chrome://flags/#enable-webassembly-simd".
- Kukhazikika ndipo tsopano kugawidwa kunja kwa Mayesero Oyambira
API , yomwe imapereka metadata yokhudzana ndi zomwe zidasungidwa kale ndi mapulogalamu a pa intaneti omwe akuyenda mu Progressive Web Apps (PWS) mode. Pulogalamuyi imatha kupulumutsa ma data osiyanasiyana pa msakatuli, kuphatikiza zithunzi, makanema ndi zolemba, ndipo kulumikizidwa kwa netiweki kukatayika, gwiritsani ntchito Cache Storage ndi IndexedDB API. Content Indexing API imapangitsa kuti zitheke kuwonjezera, kupeza ndi kuchotsa zinthu zotere. Mu msakatuli, API iyi imagwiritsidwa ntchito kale kulemba mndandanda wamasamba ndi ma multimedia data yomwe ikupezeka kuti muwonere popanda intaneti. - Mtundu wa API wakhazikika kutengera njira ya Promise, yopereka njira yotetezeka kwambiri yowongolera kuyimitsidwa kwa zotchingira zodzitchinjiriza ndikusintha zida kumachitidwe opulumutsa mphamvu.
- Mu Baibulo kwa Android nsanja kuthandizira njira zazifupi za pulogalamu, zomwe zimakupatsani mwayi wofikira mwachangu pazochita zodziwika bwino pakugwiritsa ntchito. Kuti mupange njira zazifupi, ingowonjezerani zinthu pawonekedwe la pulogalamu yapaintaneti mumtundu wa PWA (Progressive Web Apps).
- Web Worker amaloledwa kugwiritsa ntchito API , zomwe zimakupatsani mwayi wofotokozera chothandizira kuti mupange lipoti, lotchedwa mukapeza luso lachikale. Lipoti lopangidwa likhoza kusungidwa, kutumizidwa ku seva, kapena kukonzedwa ndi JavaScript script pakufuna kwa wogwiritsa ntchito.
- API yasinthidwa , zomwe zimakulolani kulumikiza chogwirizira chomwe zidziwitso za kusintha kwa kukula kwa zinthu zomwe zafotokozedwa patsamba zidzatumizidwa. Malo atatu atsopano awonjezedwa ku ResizeObserverEntry: contentBoxSize, borderBoxSize ndi devicePixelContentBoxSize kuti apereke zambiri granular, zobwezeretsedwa monga mndandanda wa ResizeObserverSize zinthu.
- Mawu ofunika owonjezera "Β»kuti mukhazikitsenso kalembedwe kazinthu kukhala mtengo wake wokhazikika.
- Anachotsa prefix ya CSS properties "-webkit-appearance" ndi "-webkit-ruby-position", yomwe tsopano ikupezeka ngati ""Ndipo"".
- Mu JavaScript kuthandizira njira zolembera ndi katundu wa kalasi ngati zachinsinsi, pambuyo pake mwayi wowapeza udzatsegulidwa kokha mkati mwa kalasi (kale minda yokhayo ingakhale yachinsinsi). Kuyika njira ndi katundu mwachinsinsi: pamaso pa dzina lamunda pali chizindikiro "#".
- Mu JavaScript thandizo (zolemba zofooka) kuzinthu za JavaScript zomwe zimakupatsani mwayi wosunga zonena za chinthucho, koma osaletsa wotolera zinyalala kuchotsa chinthucho. Thandizo la omaliza nawonso lawonjezedwa, ndikupangitsa kuti zitheke kutanthauzira chogwirizira chomwe chimatchedwa pambuyo potolera zinyalala za chinthu chomwe chafotokozedwayo.
- Kukhazikitsidwa kwa mapulogalamu pa WebAssembly kwafulumizitsidwa, chifukwa cha kukhazikitsidwa koyambirira (zoyambira) Liftoff compiler. ΠΈ . Zida zosinthira WebAssembly zakhala zikuyenda bwino, kukonza zolakwika kwasintha kwambiri mukamagwiritsa ntchito ma breakpoints (m'mbuyomu, womasulirayo ankagwiritsidwa ntchito pochotsa zolakwika, ndipo tsopano Wopanga Liftoff).
- Mu zida za opanga mawebusayiti pphttps://developers.google.com/web/updates/2020/05/devtools gulu lowunikira magwiridwe antchito lasinthidwa. Anawonjezera zambiri za metric (Total Blocking Time), kusonyeza kutalika kwa tsambalo likuwoneka kuti likupezeka, koma kwenikweni silikupezeka (ie tsamba laperekedwa kale, koma kuchitidwa kwa ulusi waukulu kumatsekedwabe ndipo kulowetsa deta sikutheka). Onjezani gawo latsopano la Experience pakuwunika ma metrics (Cumulative Layout Shift), kuwonetsa kukhazikika kwazomwe zili. Gulu loyang'anira masitayelo a CSS limapereka chithunzithunzi cha zithunzi zomwe zafotokozedwa pa "chithunzi chakumbuyo".
Kuphatikiza pazatsopano ndi kukonza zolakwika, mtundu watsopano umatha . Zofooka zambiri zidadziwika chifukwa choyesa makina pogwiritsa ntchito zida , , , ΠΈ . Nkhani imodzi (CVE-2020-6510, buffer kusefukira mu chotengera chakumbuyo) imalembedwa kuti ndi yovuta, mwachitsanzo. imakupatsani mwayi wodutsa magawo onse achitetezo cha asakatuli ndikuchita ma code pa system kunja kwa sandbox. Monga gawo la pulogalamu yolipira mphotho zandalama pozindikira zovuta zomwe zatulutsidwa pano, Google idapereka mphotho 26 zokwana $21500 (mphoto ziwiri za $5000, mphotho ziwiri za $3000, mphotho imodzi ya $2000, mphotho ziwiri za $1000, ndi mphotho zitatu za $500). Kukula kwa mphotho 16 sikunadziwikebe.
Source: opennet.ru