Kutulutsidwa kwa Chrome 91

Google yavumbulutsa kutulutsidwa kwa msakatuli wa Chrome 91. Pa nthawi yomweyi, kumasulidwa kokhazikika kwa pulojekiti yaulere ya Chromium, yomwe imakhala ngati maziko a Chrome, imapezeka. Msakatuli wa Chrome amasiyanitsidwa ndi kugwiritsa ntchito ma logo a Google, kukhalapo kwa dongosolo lotumizira zidziwitso pakagwa ngozi, ma module amasewera otetezedwa otetezedwa (DRM), dongosolo loyika zosintha zokha, ndikutumiza magawo a RLZ mukasaka. Kutulutsidwa kotsatira kwa Chrome 92 kuyenera kuchitika pa Julayi 20.

Zosintha zazikulu mu Chrome 91:

• Yakhazikitsa kuthekera koyimitsa JavaScript pagulu la tabu lomwe lagwa. Chrome 85 idayambitsa chithandizo chokonzekera ma tabo m'magulu omwe amatha kulumikizidwa ndi mtundu ndi chizindikiro. Mukadina pa gulu, ma tabo ogwirizana nawo amagwa ndipo lebulo limodzi limatsalira m'malo mwake (kudinanso lebulo kumatsegulanso gululo). Pakutulutsidwa kwatsopano, kuti muchepetse kuchuluka kwa CPU ndikupulumutsa mphamvu, ntchito zama tabu ocheperako zayimitsidwa. Kupatulapo kumapangidwira ma tabu omwe amamveka mawu, gwiritsani ntchito Web Locks kapena IndexedDB API, kulumikizana ndi chipangizo cha USB, kapena jambulani kanema, mawu, kapena zenera. Kusinthaku kudzatulutsidwa pang'onopang'ono, kuyambira ndi ochepa omwe amagwiritsa ntchito.
• Kuphatikizirapo chithandizo cha njira yayikulu yolumikizirana yomwe imalimbana ndi mphamvu zankhanza pamakompyuta a quantum. Makompyuta a Quantum amathamanga kwambiri pothana ndi vuto lakuwonongeka kwa nambala yachilengedwe kukhala zinthu zazikulu, zomwe zimadalira ma asymmetric encryption algorithms amakono ndipo sangathetsedwe bwino pama processor akale. Kuti mugwiritse ntchito mu TLSv1.3, pulogalamu yowonjezera ya CECPQ2 (Combined Elliptic-Curve and Post-Quantum 2) imaperekedwa, kuphatikiza makina osinthira makiyi a X25519 ndi dongosolo la HRSS lotengera NTRU Prime algorithm, yopangidwira ma post-quantum cryptosystems.
• Thandizo la ma protocol a TLS 1.0 ndi TLS 1.1, omwe komiti ya IETF (Internet Engineering Task Force) yasiya kugwira ntchito, yathetsedwa. Kuphatikizapo kuthekera kobwezera TLS 1.0 / 1.1 mwa kusintha ndondomeko ya SSLVersionMin yachotsedwa.
• Misonkhano ya nsanja ya Linux imaphatikizapo kugwiritsa ntchito "DNS over HTTPS" (DoH, DNS over HTTPS) mode, yomwe idabweretsedwa kale kwa ogwiritsa ntchito Windows, macOS, ChromeOS ndi Android. DNS-over-HTTPS idzatsegulidwa kwa ogwiritsa ntchito omwe zokonda zawo zimatchula opereka DNS omwe amathandizira ukadaulo uwu (pa DNS-over-HTTPS wopereka yemweyo amagwiritsidwa ntchito ngati DNS). Mwachitsanzo, ngati wosuta ali ndi DNS 8.8.8.8 yotchulidwa pazikhazikiko zamakina, ndiye kuti ntchito ya Google ya DNS-over-HTTPS (“https://dns.google.com/dns-query”) idzatsegulidwa mu Chrome ngati DNS ndi 1.1.1.1 , ndiye DNS-over-HTTPS service Cloudflare ("https://cloudflare-dns.com/dns-query"), etc.
• Port 10080, yomwe imagwiritsidwa ntchito posunga zosunga zobwezeretsera za Amanda ndi VMWare vCenter, yawonjezedwa pamndandanda wamadoko oletsedwa. M'mbuyomu, madoko 69, 137, 161, 554, 1719, 1720, 1723, 5060, 5061 ndi 6566 anali otsekedwa kale. Kwa madoko omwe ali pamndandanda wakuda, kutumiza zopempha za HTTP, HTTPS ndi FTP zatsekedwa kuti zitetezedwe kumayendedwe owukira a NAT. , yomwe imalola kuti ikatsegulidwa tsamba lawebusayiti lokonzedwa mwapadera ndi wowukira mu msakatuli kuti akhazikitse kulumikizana kwa netiweki kuchokera pa seva ya wowukirayo kupita ku doko lililonse la UDP kapena TCP pamakina a wogwiritsa ntchito, ngakhale kugwiritsa ntchito ma adilesi amkati (192.168.xx, 10) .xxx).
• Ndizotheka kukonza kukhazikitsidwa kodziyimira pawokha kwa intaneti (PWA - Progressive Web Apps) pomwe wogwiritsa ntchito alowa mudongosolo (Windows ndi macOS). Autorun imakonzedwa patsamba la chrome://apps. Ntchitoyi ikuyesedwa pa owerengeka ochepa chabe a ogwiritsa ntchito, ndipo kwa ena onse pamafunika kuyambitsa "chrome://flags/#enable-desktop-pwas-run-on-os-login".
• Monga gawo la ntchito yosuntha msakatuli kuti agwiritse ntchito mawu ophatikiza, fayilo ya "master_preferences" yasinthidwa kukhala "zokonda_zoyamba". Kuti musunge kugwirizana, chithandizo cha "master_preferences" chikhalabe mumsakatuli kwakanthawi. M'mbuyomu, osatsegula anali atachotsa kale kugwiritsa ntchito mawu oti "whitelist", "blacklist" ndi "mbadwa".
• Njira Yowonjezera Yosakatula Yotetezedwa, yomwe imatsegula macheke owonjezera kuti muteteze ku chinyengo, zochita zoyipa ndi ziwopsezo zina pa intaneti, imaphatikizaponso kutumiza mafayilo otsitsidwa kuti asike mbali ya Google. Kuphatikiza apo, Kusakatula Kwachitetezo Chowonjezera kumagwiritsa ntchito zowerengera zama tokeni omangidwa ku akaunti ya Google pozindikira zoyeserera zachinyengo, komanso kutumiza ma Referrer pamutu pa maseva a Google kuti ayang'ane kutumiza kuchokera patsamba loyipa.
• Mu kope la nsanja ya Android, mapangidwe azinthu zapaintaneti asinthidwa, omwe adakongoletsedwa kuti agwiritsidwe ntchito pazithunzi ndi machitidwe a anthu olumala (kwa makina apakompyuta, mapangidwewo adakonzedwanso mu Chrome 83). Cholinga cha kukonzanso chinali kugwirizanitsa mapangidwe a mawonekedwe a mawonekedwe ndikuchotsa kusagwirizana kwa kalembedwe - poyamba, mawonekedwe ena adapangidwa motsatira machitidwe opangira mawonekedwe, ndipo ena motsatira masitayelo otchuka kwambiri. Chifukwa cha izi, zinthu zosiyanasiyana zidali zoyenera mosiyanasiyana pazithunzi ndi machitidwe a anthu olumala.
• Adawonjeza kafukufuku wamaganizidwe omwe amawonetsedwa mukatsegula zoikamo za Privacy Sandbox (chrome://settings/privacySandbox).
• Mukamagwiritsa ntchito mtundu wa Android wa Chrome pamakompyuta apapiritsi okhala ndi zowonera zazikulu, pempho limapangidwa pamtundu wapakompyuta wa tsambalo, osati kusindikiza kwa zida zam'manja. Mutha kusintha machitidwe pogwiritsa ntchito "chrome://flags/#request-desktop-site-for-tablets".
• Khodi yoperekera matebulo idakonzedwanso, zomwe zidatithandiza kuthana ndi mavuto ndi kusagwirizana kwamakhalidwe powonetsa matebulo mu Chrome ndi Firefox / Safari.
• Kukonza ziphaso za seva kuchokera ku bungwe la certification la ku Spain la Camerfirma kwayimitsidwa chifukwa cha zochitika mobwerezabwereza kuyambira 2017 zomwe zikukhudza kuphwanya malamulo popereka satifiketi. Thandizo la ziphaso zamakasitomala limasungidwa; kutsekereza kumangogwiritsidwa ntchito pamasamba a HTTPS.
• Tikupitilizabe kugwiritsa ntchito kuthandizira magawo a netiweki kuti titeteze ku njira zotsatirira mayendedwe a ogwiritsa ntchito pakati pamasamba potengera zozindikiritsa zosungira m'malo omwe sanasungidweko mpaka kalekale ("Supercookies"). Chifukwa zinthu zosungidwa zimasungidwa m'malo amodzi, mosasamala kanthu komwe adachokera, tsamba limodzi limatha kudziwa kuti tsamba lina likukweza zinthu poyang'ana ngati chidacho chili mu cache. Chitetezo chimakhazikitsidwa pakugwiritsa ntchito magawo a netiweki (Network Partitioning), chomwe chimaphatikizapo kuwonjezera ku ma cache omwe amagawana nawo ma rekodi kudera lomwe tsamba lalikulu limatsegulidwa, zomwe zimalepheretsa kubisala kwa cache kwa zolemba zotsatirira zokha. patsamba lapano (chilemba chochokera ku iframe sichingathe kuwona ngati chidacho chidatsitsidwa patsamba lina).

  Mtengo wa magawo ndikuchepa kwa magwiridwe antchito a caching, zomwe zimapangitsa kuti pakhale kuchulukira pang'ono kwa nthawi yamasamba (kuchuluka kwa 1.32%, koma kwa 80% yamasamba ndi 0.09-0.75%). Kuti muyese magawo a magawo, mutha kuyendetsa msakatuli ndi kusankha “-enable-features=PartitionConnectionsByNetworkIsolationKey, PartitionExpectCTStateByNetworkIsolationKey, PartitionHttpServerPropertiesByNetworkIsolationKey, PartitionNelAndReportingByNetworkKessWorkIsolations CacheB yNetworkIsolationKey".

• Onjezani zakunja za REST API VersionHistory (https://versionhistory.googleapis.com/v1/chrome), momwe mungapezere zambiri zamitundu ya Chrome pokhudzana ndi nsanja ndi nthambi, komanso mbiri yosinthira osatsegula.
• Mu iframes zokwezedwa kuchokera kumadera ena kupatula tsamba loyambira, kuwonetsera kwa JavaScript dialogs alert (), confirm () ndi prompt () ndikoletsedwa, zomwe zidzateteza ogwiritsa ntchito ku zoyesayesa za munthu wina kuti awonetse mauthenga pansi pa yerekezerani kuti chidziwitsocho chikuwonetsedwa ndi tsamba lalikulu.
• WebAssembly SIMD API yakhazikika ndikuperekedwa mwachisawawa kuti mugwiritse ntchito malangizo a vector SIMD mu mapulogalamu opangidwa ndi WebAssembly. Kuti zitsimikizire kudziyimira pawokha papulatifomu, imapereka mtundu watsopano wa 128-bit womwe umayimira mitundu yosiyanasiyana ya data yodzaza, ndi magwiridwe antchito angapo ofunikira pokonza deta yodzaza. SIMD imakulolani kuti muwonjezere zokolola pofananiza kukonzanso deta ndipo zidzakhala zothandiza polemba ma code anu ku WebAssembly.
• Ma API angapo atsopano awonjezedwa ku Origin Trials mode (zoyeserera zomwe zimafunikira kuyatsa kosiyana). Origin Trial amatanthauza kuthekera kogwira ntchito ndi API yotchulidwa kuchokera ku mapulogalamu omwe adatsitsidwa kuchokera ku localhost kapena 127.0.0.1, kapena mutalembetsa ndi kulandira chizindikiro chapadera chomwe chili chovomerezeka kwa nthawi yochepa pa tsamba linalake.
  • WebTransport ndi protocol ndipo imatsagana ndi JavaScript API potumiza ndi kulandira data pakati pa msakatuli ndi seva. Njira yolankhulirana imakonzedwa pamwamba pa HTTP / 3 pogwiritsa ntchito QUIC protocol monga zoyendera, zomwe, ndizowonjezera ku protocol ya UDP yomwe imathandizira kuchulukitsa kwa maulumikizi angapo ndipo imapereka njira zolembera zofanana ndi TLS / SSL.

    WebTransport ingagwiritsidwe ntchito m'malo mwa njira za WebSockets ndi RTCDataChannel, zomwe zimapereka zowonjezera zowonjezera monga maulendo amtundu wambiri, mitsinje yopanda malire, kutumiza kunja, njira zodalirika komanso zosadalirika. Kuphatikiza apo, WebTransport ingagwiritsidwe ntchito m'malo mwa makina a Server Push, omwe Google adasiya mu Chrome.

  • Mawonekedwe ofotokozera ofotokozera maulalo a pulogalamu yapaintaneti (PWAs), yothandizidwa kugwiritsa ntchito Capture_links parameter mu chiwonetsero cha pulogalamu yapaintaneti ndikulola masamba kuti atsegule zenera latsopano la PWA pomwe ulalo wa pulogalamu ukadina kapena kusintha mawonekedwe awindo limodzi, zofanana ndi mafoni a m'manja.
  • Adawonjezera WebXR Plane Detection API, yomwe imapereka chidziwitso chokhudza malo ozungulira m'malo a 3D. API yotchulidwa imapangitsa kuti zitheke kupeŵa kukonza kwambiri deta yopezeka kudzera pa foni MediaDevices.getUserMedia(), pogwiritsa ntchito kukhazikitsidwa kwa ma algorithms a masomphenya apakompyuta. Tikukumbutseni kuti WebXR API imakupatsani mwayi wogwirizanitsa ntchito ndi magulu osiyanasiyana a zida zenizeni zenizeni, kuyambira pa zipewa za 3D zokhazikika mpaka mayankho otengera mafoni.
• Thandizo logwira ntchito ndi ma WebSockets pa HTTP/2 (RFC 8441) lakhazikitsidwa, lomwe liri lovomerezeka pazopempha zotetezedwa ku WebSockets komanso pamaso pa HTTP/2 yolumikizana ndi seva, yomwe idalengeza kuthandizira "WebSockets over. HTTP/2"kuwonjezera.
• Malire pa kulondola kwamitengo yanthawi yopangidwa ndi kuyitanira ku performance.now() imagwirizana pamapulatifomu onse omwe amathandizidwa ndipo amalola kuthekera kodzipatula kwa ogwira ntchito m'njira zosiyanasiyana. Mwachitsanzo, pamakina apakompyuta, kulondola pokonza m'malo osadzipatula kwachepetsedwa kuchokera ku 5 mpaka 100 microseconds.
• Zomanga pa desktop tsopano zikuphatikizanso kutha kuwerenga mafayilo kuchokera pa clipboard (kulemba mafayilo pa clipboard ndikoletsedwabe). async ntchito paPaste(e) {lolani fayilo = e.clipboardData.files[0]; lolani zomwe zili mkati = ait file.text(); }
• CSS imagwiritsa ntchito lamulo la @counter-style, lomwe limakupatsani mwayi wofotokozera kalembedwe kanu paziwerengero ndi zolemba pamndandanda wamawerengero.
• Ma CSS pseudo-class ":host ()" ndi ":host-context ()" awonjezera kuthekera kopitilira zikhalidwe za osankha pawiri ( ) kuwonjezera pa mndandanda wa osankhidwa ( ).
• Mawonekedwe owonjezera a GravitySensor kuti adziwe zambiri za volumetric (ma axes atatu ogwirizanitsa) kuchokera ku sensa yokoka.
• File System Access API imapereka mwayi wofotokozera malingaliro osankha dzina la fayilo ndi chikwatu chomwe chimaperekedwa pazokambirana kuti mupange kapena kutsegula fayilo.
• Iframes zokwezedwa kuchokera kumadera ena amaloledwa kulowa mu WebOTP API ngati wogwiritsa ntchito apereka zilolezo zoyenera. WebOTP imakulolani kuti muwerenge makhodi otsimikizira kamodzi kokha otumizidwa kudzera pa SMS.
• Amaloledwa kugawana nawo zidziwitso zamasamba olumikizidwa pogwiritsa ntchito makina a DAL (Digital Asset Links), omwe amalola mapulogalamu a Android kuti agwirizane ndi masamba kuti asavutike kulowa.
• Ogwira ntchito amalola kugwiritsa ntchito ma module a JavaScript. Mukatchula mtundu wa 'module' mukamayimbira womanga, zolemba zomwe zafotokozedwazo zidzayikidwa mu mawonekedwe a ma modules ndi kupezeka kuti zilowe m'malo mwa antchito. Thandizo la module limapangitsa kukhala kosavuta kugawana ma code pamasamba onse ndi ogwira ntchito.
• JavaScript imapereka mwayi wowona ngati pali magawo achinsinsi pa chinthu pogwiritsa ntchito mawu akuti "#foo in obj". kalasi A {static test(obj) {console.log(#foo in obj); } #foo = 0; } A.kuyesa(A() yatsopano); // zoona A.test({}); // zabodza
• JavaScript mwachisawawa imalola kugwiritsa ntchito mawu ofunikira omwe akudikirira m'ma module apamwamba, omwe amalola mafoni asynchronous kuti azitha kuphatikizidwa bwino mu ndondomeko yotsitsa gawo ndikupewa kuwakulunga mu "ntchito ya async". Mwachitsanzo, mmalo mwa (async function() {wait Promise.resolve(console.log('test')); }()); tsopano mutha kulemba wait Promise.resolve(console.log('test'));
• Injini ya V8 JavaScript yakulitsa luso la caching la template, lomwe lawonjezera liwiro lopambana mayeso a Speedometer4.5-FlightJS ndi 2%.
• Kusintha kwakukulu kwapangidwa kwa zida za opanga mawebusayiti. Njira yatsopano yoyang'anira Memory yawonjezedwa, kupereka zida zowunikira deta ya ArrayBuffer ndi kukumbukira kwa Wasm.

  Chizindikiro cha magwiridwe antchito awonjezedwa pagawo la Magwiridwe, kukulolani kuti muwone ngati tsamba likufunika kukhathamiritsa kapena ayi.

  

  Kuwoneratu kwazithunzi mu gulu la Elements ndi Network Analysis gulu limapereka chidziwitso chokhudza chiwongolero cha chithunzicho, zosankha zake, ndi kukula kwa fayilo.

  

  Pagulu loyang'anira maukonde, tsopano ndizotheka kusintha zovomerezeka za mutu wa Content-Encoding.

  

  Mugawo la kalembedwe, mutha kuwona mwachangu mtengo wowerengedwera mukamayenda pazigawo za CSS posankha "Onani mtengo wowerengera" pazosankha.

  

Kuphatikiza pazatsopano ndi kukonza zolakwika, mtundu watsopanowu umachotsa ziwopsezo za 32. Zofooka zambiri zidadziwika chifukwa choyesera zokha pogwiritsa ntchito AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer ndi zida za AFL. Palibe zovuta zomwe zadziwika zomwe zingalole kuti munthu adutse milingo yonse yachitetezo cha asakatuli ndikuyika ma code padongosolo kunja kwa sandbox. Monga gawo la pulogalamu yolipira mphotho zandalama pozindikira zovuta zomwe zatulutsidwa pano, Google idapereka mphotho 21 zokwana $92000 (mphotho imodzi ya $20000, mphotho imodzi ya $15000, mphotho zinayi za $7500, mphotho zitatu za $5000, mphotho zitatu za $3000, mphotho ziwiri $1000 $500). Kukula kwa mphotho za 5 sikunadziwikebe.

Source: opennet.ru