Kutulutsidwa kwa Chrome 92

Google yavumbulutsa kutulutsidwa kwa msakatuli wa Chrome 92. Panthawi imodzimodziyo, kumasulidwa kokhazikika kwa pulojekiti yaulere ya Chromium, yomwe imakhala ngati maziko a Chrome, ilipo. Msakatuli wa Chrome amasiyanitsidwa ndi kugwiritsa ntchito ma logo a Google, kukhalapo kwa dongosolo lotumizira zidziwitso pakagwa ngozi, ma module amasewera otetezedwa otetezedwa (DRM), dongosolo loyika zosintha zokha, ndikutumiza magawo a RLZ mukasaka. Kutulutsidwa kotsatira kwa Chrome 93 kukonzedwa pa Ogasiti 31st.

Zosintha zazikulu mu Chrome 92:

• Zida zawonjezedwa ku zochunira kuti ziwongolere kuphatikizidwa kwa Zachinsinsi Sandbox zigawo. Wogwiritsa ntchitoyo amapatsidwa mwayi woletsa teknoloji ya FLoC (Federated Learning of Cohorts), yomwe ikupangidwa ndi Google kuti ilowe m'malo mwa ma Cookies omwe amatsata kayendedwe ka "cohorts" omwe amalola ogwiritsa ntchito kudziwika ndi zofuna zofanana popanda kuzindikira anthu. Magulu amawerengeredwa kumbali ya msakatuli pogwiritsa ntchito njira zophunzirira zamakina posakatula mbiri yakale ndi zomwe zatsegulidwa mu msakatuli.
• Kwa ogwiritsa ntchito pakompyuta, cache ya Back-forward imayatsidwa mwachisawawa, ndikupereka kuyenda pompopompo mukamagwiritsa ntchito mabatani a Back and Forward kapena podutsa masamba omwe adawonedwa kale atsambali. M'mbuyomu, chosungira chodumphira chinkapezeka pomanga nsanja ya Android.
• Kuchulukitsa kudzipatula kwamasamba ndi zowonjezera munjira zosiyanasiyana. Ngati kale Site Isolation limagwirira anaonetsetsa kudzipatula kwa malo wina ndi mzake mu njira zosiyanasiyana, komanso analekanitsa zonse zowonjezera mu njira ina, ndiye kumasulidwa kwatsopano kumagwiritsa ntchito kulekanitsa kwa osatsegula zowonjezera wina ndi mzake posuntha aliyense add- kupitilira munjira ina, zomwe zidapangitsa kuti zitheke kupanga chotchinga china choteteza kuzinthu zina zoyipa.
• Kuchulukitsa kochulukira komanso kuchita bwino pakuzindikira kwachinyengo. Liwiro lozindikira zachinyengo potengera kusanthula kwazithunzi zakomweko lidakwera mpaka nthawi 50 mu theka la milanduyo, ndipo mu 99% yamilandu idakhala yothamanga nthawi 2.5. Pa avareji, nthawi yoyika m'magulu a phishing ndi zithunzi idatsika kuchokera pa masekondi 1.8 kufika pa 100 ms. Ponseponse, kuchuluka kwa CPU komwe kumapangidwa ndi njira zonse zoperekera kudatsika ndi 1.2%.
• Madoko 989 (ftps-data) ndi 990 (ftps) awonjezedwa pamndandanda wamadoko oletsedwa. M'mbuyomu, madoko 69, 137, 161, 554, 1719, 1720, 1723, 5060, 5061, 6566 ndi 10080 anali otsekedwa kale. slipstreaming attack, yomwe imalola kuti mutsegule tsamba lawebusayiti lokonzedwa mwapadera ndi wowukirayo mu msakatuli, yambitsani kulumikizana kwa netiweki kuchokera pa seva ya wowukirayo kupita ku doko lililonse la UDP kapena TCP pamakina a wogwiritsa ntchito, ngakhale mumagwiritsa ntchito ma adilesi amkati (192.168.xx). , 10 xxx).
• Chofunikira chadziwika kuti mugwiritse ntchito kutsimikizira kwazinthu ziwiri posindikiza zowonjezera kapena zosintha zamitundu mu Chrome Web Store.
• Tsopano ndizotheka kuletsa zowonjezera zomwe zayikidwa kale mu msakatuli ngati zichotsedwa pa Chrome Web Store chifukwa chakuphwanya malamulo.
• Mukatumiza mafunso a DNS, pankhani yogwiritsa ntchito ma seva akale a DNS, kuphatikiza zolemba za "A" ndi "AAAA" kuti mudziwe ma adilesi a IP, mbiri ya "HTTPS" DNS tsopano ikufunsidwanso, momwe magawo amapititsidwira kuti afulumire. kukhazikitsidwa kwa malumikizidwe a HTTPS, monga makonda a protocol, TLS ClientHello encryption keys, ndi mndandanda wa subdomains alias.
• Kuyimbira ma dialogs a JavaScript window.alert, window.confirm ndi window.prompt ndikoletsedwa kumabuloko a iframe omwe atulutsidwa kuchokera kumadomeni ena kupatula madomeni omwe ali patsamba lino. Kusinthaku kudzathandiza kuteteza ogwiritsa ntchito ku nkhanza zomwe zimagwirizanitsidwa ndi kuyesa kupereka chidziwitso cha chipani chachitatu monga pempho kuchokera ku tsamba lalikulu.
• Tsamba latsopano la tabu limapereka mndandanda wa zolemba zodziwika kwambiri zosungidwa mu Google Drive.
• Ndizotheka kusintha dzina ndi chithunzi cha PWA (Progressive Web Apps) mapulogalamu.
• Pakawerengedwe kakang'ono kachisawawa ka masamba omwe amafunikira kuti mulembe adilesi kapena nambala ya kirediti kadi, malingaliro odzaza okha adzayimitsidwa ngati kuyesa.
• Mu mtundu wapakompyuta, njira yosakira zithunzi (chinthu cha "Pezani Chithunzi" pamindandanda yankhani) yasinthidwa kuti igwiritse ntchito Google Lens m'malo mwa injini yosakira yanthawi zonse ya Google. Mukadina batani lolingana mumenyu yankhaniyo, wogwiritsa ntchitoyo adzatumizidwa ku pulogalamu ina yapaintaneti.
• Mu mawonekedwe a incognito mode, maulalo ku mbiri yosakatula amabisika (malumikizidwewo alibe ntchito, chifukwa adatsogolera kutsegulidwa kwa stub ndi chidziwitso chomwe mbiriyakale sinasonkhanitsidwe).
• Onjezani malamulo atsopano omwe amasinthidwa akalowa mu bar ya adilesi. Mwachitsanzo, kuti muwonetse batani lofulumira kupita patsamba kuti muwone chitetezo cha mawu achinsinsi ndi zowonjezera, ingolembani "cheke chachitetezo", ndikupita ku zoikamo zachitetezo ndi kulunzanitsa, ingolembani "konza zoikamo zachitetezo" ndi " samalira kulunzanitsa”.
• Kusintha kwachindunji mu mtundu wa Android wa Chrome:
  • Gululi lili ndi batani la "Magic Toolbar" lomwe mungasinthire makonda lomwe limawonetsa njira zazifupi zosankhidwa malinga ndi zomwe wogwiritsa ntchito akuchita komanso maulalo omwe angafunike pakadali pano.
  • Kukhazikitsa kwa njira yophunzirira makina pazida kuti muzindikire kuyeserera kwachinyengo kwasinthidwa. Zoyeserera zachinyengo zikazindikirika, kuphatikiza pakuwonetsa tsamba lochenjeza, msakatuli tsopano atumiza zambiri za mtundu wa makina ophunzirira makina, kulemera kwake komwe kuwerengedwera pagulu lililonse, ndi mbendera yogwiritsira ntchito mtundu watsopano ku ntchito yakunja ya Safe Browsing. .
  • Tachotsa zochunira za “Onetsani malingaliro amasamba ofanana ngati tsamba silikupezeka”, zomwe zidapangitsa kuti masamba ofananawo avomerezedwe potengera kutumiza funso ku Google ngati tsambalo silinapezeke. Zochunirazi zidachotsedwa kale pakompyuta.
  • Kugwiritsiridwa ntchito kwa malo odzipatula kumachitidwe aumwini kwakulitsidwa. Pazifukwa zogwiritsa ntchito zinthu, malo akuluakulu osankhidwa okha ndi omwe adasamutsidwa kuti asiyane. Mu mtundu watsopano, kudzipatula kudzayambanso kugwira ntchito kumasamba omwe wogwiritsa ntchito adalowetsedwamo ndi kutsimikizika kudzera pa OAuth (mwachitsanzo, kulumikiza kudzera muakaunti ya Google) kapena omwe amakhazikitsa mutu wa Cross-Origin-Opener-Policy HTTP. Kwa iwo omwe akufuna kuti azitha kudzipatula pamasamba onse, makonzedwe a "chrome://flags/#enable-site-per-process" amaperekedwa.
  • Njira zodzitchinjiriza za injini ya V8 motsutsana ndi njira zam'mbali monga Specter ndizozimitsa, zomwe sizimaganiziridwa kuti ndizothandiza ngati kudzipatula kwamasamba mosiyanasiyana. M'mawonekedwe apakompyuta, njirazi zidayimitsidwa pakutulutsidwa kwa Chrome 70.
  • Kufikira mosavuta zochunira zilolezo zamasamba, monga maikolofoni, kamera, ndi malo. Kuti muwonetse mndandanda wa zilolezo, ingodinani pachizindikiro cha loko mu adilesi, kenako sankhani gawo la "Zilolezo".
• Ma API angapo atsopano awonjezedwa ku Origin Trials mode (zoyeserera zomwe zimafunikira kuyatsa kosiyana). Origin Trial amatanthauza kuthekera kogwira ntchito ndi API yotchulidwa kuchokera ku mapulogalamu omwe adatsitsidwa kuchokera ku localhost kapena 127.0.0.1, kapena mutalembetsa ndi kulandira chizindikiro chapadera chomwe chili chovomerezeka kwa nthawi yochepa pa tsamba linalake.
  • API File Handling, yomwe imakupatsani mwayi wolembetsa mawebusayiti ngati oyang'anira mafayilo. Mwachitsanzo, pulogalamu yapaintaneti yomwe ikugwira ntchito mu PWA (Progressive Web Apps) yokhala ndi zolemba zolembera imatha kudzilembetsa yokha ngati ".txt" yosamalira mafayilo, pambuyo pake ingagwiritsidwe ntchito mu woyang'anira mafayilo adongosolo kuti atsegule mafayilo amawu.
  • Shared Element Transitions API, yomwe imakupatsani mwayi wogwiritsa ntchito zokonzeka zopangidwa ndi msakatuli zomwe zikuwonetsa kusintha kwa mawonekedwe patsamba limodzi (SPA, tsamba limodzi) ndi masamba angapo (MPA, masamba ambiri). ) mapulogalamu a pa intaneti.
• Zosintha zosintha kukula zawonjezedwa ku lamulo la @font-face CSS, lomwe limakupatsani mwayi wokulitsa kukula kwa glyph pamawonekedwe enaake osasintha mtengo wamtundu wamtundu wa CSS (malo omwe ali pansi pamunthuyo amakhalabe ofanana. , koma kukula kwa glyph m'derali kusintha).
• Mu JavaScript, zinthu za Array, String, ndi TypedArray zimagwiritsa ntchito njira ya at(), yomwe imakupatsani mwayi wogwiritsa ntchito indexing yachibale (malo achibale amatchulidwa ngati array index), kuphatikizapo kutchula zolakwika zokhudzana ndi mapeto (mwachitsanzo, "arr.at(-1)" ibweza chinthu chomaliza pamndandanda).
• The dayPeriod katundu wawonjezedwa kwa Intl.DateTimeFormat JavaScript constructor, zomwe zimakulolani kusonyeza pafupifupi nthawi ya tsiku (m'mawa, madzulo, masana, usiku).
• Mukamagwiritsa ntchito zinthu za SharedArrayBuffers, zomwe zimakulolani kuti mupange zosungiramo zomwe mukugawana nazo, muyenera kufotokozera mitu ya Cross-Origin-Opener-Policy ndi Cross-Origin-Embedder-Policy HTTP, popanda zomwe pempho lidzatsekedwa.
• Zochita za "togglemicrophone", "togglecamera" ndi "hangup" zawonjezedwa ku Media Session API, kulola masamba omwe akugwiritsa ntchito makina amisonkhano yamakanema kuti alumikizane ndi omwe amawathandizira kuti asalankhule / osalankhula, kuzimitsa / kuyatsa ndi mabatani omaliza omwe akuwonetsedwa mu chithunzi-mu-chithunzi mawonekedwe kuyimba.
• Web Bluetooth API yawonjezera kuthekera kosefa zida za Bluetooth zopezeka ndi wopanga ndi zozindikiritsa zinthu. Zosefera zimayikidwa kudzera pagawo la "options.filters" munjira ya Bluetooth.requestDevice ().
• Gawo loyamba lochepetsera zomwe zili mumutu wa User-Agent HTTP wakhazikitsidwa: tsamba la DevTools Issues tsopano likuwonetsa chenjezo la kuchotsedwa kwa navigator.userAgent, navigator.appVersion ndi navigator.platform.
• Zina mwazosintha zapangidwa ku zida za opanga mawebusayiti. Web console imapereka kuthekera kofotokozeranso mawu oti "const". Mugawo la Elements, zinthu za iframe zimatha kuwona mwachangu zambiri kudzera pamenyu yomwe imawonekera mukadina kumanja pa chinthucho. Kuwongolera zolakwika za CORS (Cross-origin resource sharing) zolakwika. Kutha kusefa zopempha za netiweki kuchokera ku WebAssembly zawonjezedwa ku gulu loyang'anira ntchito za netiweki. Mkonzi watsopano wa CSS Grid waperekedwa ("chiwonetsero: gridi" ndi "chiwonetsero: mkati mwa gridi") ndi ntchito yowoneratu zosintha.

Kuphatikiza pazatsopano ndi kukonza zolakwika, mtundu watsopano umachotsa zovuta 35. Zofooka zambiri zidadziwika chifukwa choyesera zokha pogwiritsa ntchito AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer ndi zida za AFL. Palibe zovuta zomwe zadziwika zomwe zingalole kuti munthu adutse milingo yonse yachitetezo cha asakatuli ndikuyika ma code padongosolo kunja kwa sandbox. Monga gawo la pulogalamu yolipira mphotho zandalama pozindikira zovuta zomwe zatulutsidwa pano, Google idapereka mphotho 24 zokwana $112000 (mphoto ziwiri za $15000, mphotho zinayi za $10000, mphotho imodzi ya $8500, mphotho ziwiri za $7500, mphotho zitatu za $5000, mphotho imodzi $3000, ndi $500 imodzi, ). Kukula kwa mphotho 11 sikunadziwikebe.

Source: opennet.ru