Kutulutsidwa kwa Chrome 93

Google yatulutsa kumasulidwa kwa msakatuli wa Chrome 93. Panthawi imodzimodziyo, kumasulidwa kokhazikika kwa pulojekiti yaulere ya Chromium, yomwe imakhala ngati maziko a Chrome, ikupezeka. Msakatuli wa Chrome amasiyanitsidwa ndi kugwiritsa ntchito ma logo a Google, kukhalapo kwa dongosolo lotumizira zidziwitso pakagwa ngozi, ma module amasewera otetezedwa otetezedwa (DRM), dongosolo loyika zosintha zokha, ndikutumiza magawo a RLZ mukasaka. Kutulutsidwa kotsatira kwa Chrome 94 kuyenera kuchitika pa Seputembara 21 (chitukuko chasunthidwa kupita ku 4-sabata yotulutsidwa).

Zosintha zazikulu mu Chrome 93:

• Mapangidwe a chipika chokhala ndi chidziwitso cha tsamba (chidziwitso cha tsamba) chakhala chamakono, momwe kuthandizira kwa midadada yokhala ndi zisa zakhazikitsidwa, ndipo mndandanda wotsikira pansi wokhala ndi ufulu wopeza wasinthidwa ndi ma switch. Mndandandawu umatsimikizira kuti chidziwitso chofunikira kwambiri chikuwonekera poyamba. Kusintha sikuloledwa kwa ogwiritsa ntchito onse; kuti muyambitse, mutha kugwiritsa ntchito "chrome://flags/#page-info-version-2-desktop".
• Kwa owerengeka ochepa a ogwiritsa ntchito, monga kuyesera, chizindikiro cholumikizira chotetezeka mu bar adiresi chinasinthidwa ndi chizindikiro chopanda ndale chomwe sichimayambitsa kutanthauzira kawiri (chikhocho chinasinthidwa ndi chizindikiro cha "V"). Pamalumikizidwe okhazikitsidwa popanda kubisa, chizindikiro "chosatetezedwa" chikupitiliza kuwonetsedwa. Chifukwa chomwe chatchulidwa m'malo mwa chizindikirocho ndikuti ogwiritsa ntchito ambiri amaphatikiza chizindikiro cha padlock ndi chakuti zomwe zili patsambalo zitha kudaliridwa, m'malo moziwona ngati chizindikiro kuti kulumikizanako kwasungidwa. Kutengera kafukufuku wa Google, 11% yokha ya ogwiritsa ntchito amamvetsetsa tanthauzo la chithunzicho ndi loko.
• Mndandanda wa ma tabo otsekedwa posachedwa tsopano ukuwonetsa zomwe zili m'magulu otsekedwa a ma tabo (m'mbuyomu mndandandawo unkangowonetsa dzina la gululo popanda kufotokozera zomwe zili mkatimo) ndikutha kubweza gulu lonse ndi ma tabo amodzi kuchokera pagulu nthawi imodzi. Chiwonetserochi sichimathandizidwa ndi ogwiritsa ntchito onse, chifukwa chake mungafunikire kusintha "chrome: // flags/#tab-restore-sub-menus" kuti muthe.
• Kwa mabizinesi, zosintha zatsopano zakhazikitsidwa: DefaultJavaScriptJitSetting, JavaScriptJitAllowedForSites ndi JavaScriptJitBlockedForSites, zomwe zimakupatsani mwayi wowongolera mawonekedwe a JIT-less, omwe amalepheretsa kugwiritsa ntchito JIT kuphatikiza popanga JavaScript (wotanthauzira Ignition yekha ndi amene amagwiritsidwa ntchito) ndi kuletsa kuperekedwa. kukumbukira pakuchita ma code. Kuletsa JIT kungakhale kothandiza kukonza chitetezo chogwira ntchito ndi mapulogalamu omwe angakhale oopsa pa intaneti pamtengo wochepetsera ntchito ya JavaScript pafupifupi 17%. Ndizofunikira kudziwa kuti Microsoft yapita patsogolo kwambiri ndikukhazikitsa njira yoyeserera ya "Super Duper Secure" mu msakatuli wa Edge, kulola wogwiritsa ntchito kuletsa JIT ndikuyambitsa njira zotetezera zosagwirizana ndi ma hardware za CET (Controlflow-Enforcement Technology), ACG (Arbitrary Code Guard) ndi CFG (Control Flow Guard) pokonza zomwe zili pa intaneti. Ngati kuyesako kukuyenda bwino, ndiye kuti titha kuyembekezera kuti isamutsidwe ku gawo lalikulu la Chrome.
• Tsamba latsopano la tabu limapereka mndandanda wa zolemba zodziwika kwambiri zosungidwa mu Google Drive. Zomwe zili pamndandandawu zikugwirizana ndi gawo la Priority mu drive.google.com. Kuti muwongolere zomwe zili mu Google Drive, mutha kugwiritsa ntchito "chrome://flags/#ntp-modules" ndi "chrome://flags/#ntp-drive-module".
• Makhadi azidziwitso atsopano awonjezedwa patsamba la Open New Tab kuti akuthandizeni kupeza zomwe mwawona posachedwa ndi zina zokhudzana nazo. Makhadi apangidwa kuti zikhale zosavuta kupitiriza kugwira ntchito ndi chidziwitso chomwe kuyang'ana kwake kunasokonezedwa, mwachitsanzo, makhadi adzakuthandizani kupeza Chinsinsi cha mbale yomwe yapezeka posachedwa pa intaneti koma inatayika mutatseka tsamba, kapena kupitiriza kupanga. kugula m'masitolo. Monga kuyesa, ogwiritsa ntchito amapatsidwa mamapu awiri atsopano: "Maphikidwe" (chrome://flags/#ntp-recipe-tasks-module) pofufuza maphikidwe ophikira ndikuwonetsa maphikidwe omwe awonedwa posachedwa; "Kugula" (chrome://flags/#ntp-chrome-cart-module) kwa zikumbutso za zinthu zomwe zasankhidwa m'masitolo apaintaneti.
• Mtundu wa Android umawonjezera mwayi wosankha gulu losakira (chrome://flags/#continuous-search), zomwe zimakulolani kuti musunge zotsatira zakusaka za Google posachedwa (gululi likupitiliza kuwonetsa zotsatira mutasamukira kumasamba ena).
• Njira yoyesera yogawana mawu awonjezedwa ku mtundu wa Android (chrome://flags/#webnotes-stylize), womwe umakupatsani mwayi wosunga chidutswa chosankhidwa chatsamba ngati mawu ndikugawana ndi ogwiritsa ntchito ena.
• Mukasindikiza zowonjezera kapena zosintha zamitundu ku Chrome Web Store, kutsimikizira kwazinthu ziwiri ndikofunikira tsopano.
• Ogwiritsa ntchito Akaunti ya Google ali ndi mwayi wosunga zambiri zamalipiro ku akaunti yawo ya Google.
• Mu mawonekedwe a incognito, ngati njira yochotseratu deta yoyendayenda itsegulidwa, kukambirana kwatsopano kotsimikizira ntchito kwakhazikitsidwa, kufotokoza kuti kuchotsa deta kudzatseka zenera ndikuthetsa magawo onse mu incognito mode.
• Chifukwa chosagwirizana ndi firmware ya zida zina, kuthandizira njira yatsopano yolumikizirana yowonjezeredwa ku Chrome 91, kusagwirizana ndi kulosera pamakompyuta ochulukira, kutengera kugwiritsa ntchito kukulitsa kwa CECPQ1.3 (Combined Elliptic-Curve and Post-Quantum 2) TLSv2, kuphatikiza makina osinthira makiyi a X25519 ndi dongosolo la HRSS lotengera NTRU Prime algorithm yopangidwira ma post-quantum cryptosystems.
• Madoko 989 (ftps-data) ndi 990 (ftps) awonjezedwa ku chiwerengero cha madoko oletsedwa a netiweki kuti aletse kuwukira kwa ALPACA. M'mbuyomu, pofuna kuteteza kuukira kwa NAT, madoko 69, 137, 161, 554, 1719, 1720, 1723, 5060, 5061, 6566 ndi 10080 anali atatsekedwa kale.
• TLS sigwiritsanso ntchito ma ciphers kutengera ma aligorivimu a 3DES. Makamaka, TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher suite, yomwe ingavutike ndi Sweet32, yachotsedwa.
• Thandizo la Ubuntu 16.04 lathetsedwa.
• Ndizotheka kugwiritsa ntchito WebOTP API pakati pa zida zosiyanasiyana zolumikizidwa kudzera muakaunti wamba ya Google. WebOTP imalola pulogalamu yapaintaneti kuti iwerenge manambala otsimikizira kamodzi komwe amatumizidwa kudzera pa SMS. Kusinthaku kumapangitsa kuti zitheke kulandira nambala yotsimikizira pa foni yam'manja yomwe ikuyenda ndi Chrome ya Android, ndikuyiyika pakompyuta.
• API ya Client Client Hints API yakulitsidwa, yapangidwa kuti ikhale m'malo mwa mutu wa User-Agent. Malangizo Ogwiritsa Ntchito Makasitomala amakupatsani mwayi woti mukonzekere kutumizidwa kosankhidwa kwa msakatuli ndi magawo adongosolo (mtundu, nsanja, ndi zina) pokhapokha atapempha seva. Wogwiritsa, nayenso, amatha kudziwa zomwe zingaperekedwe kwa eni malo. Mukamagwiritsa ntchito Maupangiri a Makasitomala Ogwiritsa Ntchito, chizindikiritso cha msakatuli sichimaperekedwa popanda kufunsidwa mwachindunji, ndipo mwachisawawa magawo oyambira okha ndi omwe amatchulidwa, zomwe zimapangitsa kuti kuzizindikiritsa kukhala zovuta.

  Mtundu watsopanowu umathandizira Sec-CH-UA-Bitness parameter kubweza zambiri za kukula kwa nsanja, zomwe zitha kugwiritsidwa ntchito popereka mafayilo amabina okhathamiritsa. Mwachikhazikitso, gawo la Sec-CH-UA-Platform limatumizidwa ndi chidziwitso cha nsanja. Mtengo wa UADataValues ​​womwe wabwezedwa poyimba getHighEntropyValues() umagwiritsidwa ntchito mwachisawawa kuti ubwezere magawo amtundu uliwonse ngati sikungatheke kubweza njira yatsatanetsatane. Njira ya toJSON yawonjezedwa ku NavigatorUAData chinthu, chomwe chimakulolani kugwiritsa ntchito zomanga monga JSON.stringify(navigator.userAgentData).

• Kutha kuyika zinthu m'maphukusi amtundu wa Web Bundle, oyenerera kukonza kutsitsa kwamafayilo ambiri (ma CSS styles, JavaScript, images, iframes), kwakhazikika ndikuperekedwa mwachisawawa. Pakati pa zofooka zomwe zilipo zothandizira phukusi la mafayilo a JavaScript (webpack), zomwe Web Bundle ikuyesera kuthetsa: phukusi lokha, koma osati zigawo zake, likhoza kutha mu cache ya HTTP; kuphatikiza ndi kuphedwa kungayambe pokhapokha phukusi litatsitsidwa kwathunthu; Zina zowonjezera monga CSS ndi zithunzi ziyenera kusungidwa mumtundu wa zingwe za JavaScript, zomwe zimakulitsa kukula kwake komanso zimafuna gawo lina losanthulika.
• WebXR Plane Detection API ikuphatikizidwa, yopereka chidziwitso chokhudza malo ozungulira mu chilengedwe cha 3D. API yotchulidwa imapangitsa kuti zitheke kupeŵa kukonza kwambiri deta yopezeka kudzera pa foni MediaDevices.getUserMedia(), pogwiritsa ntchito kukhazikitsidwa kwa ma algorithms a masomphenya apakompyuta. Tikukumbutseni kuti WebXR API imakupatsani mwayi wogwirizanitsa ntchito ndi magulu osiyanasiyana a zida zenizeni zenizeni, kuyambira pa zipewa za 3D zokhazikika mpaka mayankho otengera mafoni.
• Ma API angapo atsopano awonjezedwa ku Origin Trials mode (zoyeserera zomwe zimafunikira kuyatsa kosiyana). Origin Trial amatanthauza kuthekera kogwira ntchito ndi API yotchulidwa kuchokera ku mapulogalamu omwe adatsitsidwa kuchokera ku localhost kapena 127.0.0.1, kapena mutalembetsa ndi kulandira chizindikiro chapadera chomwe chili chovomerezeka kwa nthawi yochepa pa tsamba linalake.
  • Multi-Screen Window Placement API yaperekedwa, yomwe imakulolani kuti muyike mawindo pachiwonetsero chilichonse chogwirizanitsidwa ndi dongosolo lamakono, komanso kusunga malo awindo ndipo, ngati kuli kofunikira, onjezerani zenera pawindo lonse. Mwachitsanzo, pogwiritsa ntchito API yomwe yatchulidwa, pulogalamu yapaintaneti yowonetsera zowonetsera imatha kukonza mawonedwe azithunzi pa sikirini imodzi, ndikuwonetsa cholembedwa cha wowonetsa pa china.
  • Mutu wa Cross-Origin-Embedder-Policy, womwe umayang'anira njira yodzipatula ya Cross-Origin ndikukulolani kuti mufotokoze malamulo otetezeka ogwiritsira ntchito pa tsamba la Privileged Operations, tsopano imathandizira "credentialless" parameter kuti mulepheretse kutumiza kwa chidziwitso chokhudzana ndi chidziwitso monga Ma cookie ndi satifiketi ya kasitomala.
  • Pamapulogalamu oima pawokha a pa intaneti (PWA, Progressive Web Apps) omwe amawongolera kuperekedwa kwa zomwe zili pazenera ndi zolowera, pali zokutira zowongolera zenera, monga mutu ndi mabatani okulitsa/kugwa. Kuphimba kumakulitsa malo osinthika kuti atseke zenera lonse ndikukulolani kuti muwonjezere zinthu zanu pamutu.
  • Adawonjezera kuthekera kopanga mapulogalamu a PWA omwe angagwiritsidwe ntchito ngati ma URL. Mwachitsanzo, pulogalamu ya music.example.com imatha kudzilembetsa yokha ngati chothandizira ulalo https://*.music.example.com ndi zosintha zonse kuchokera kumapulogalamu akunja pogwiritsa ntchito maulalo awa, mwachitsanzo, kuchokera kwa ma messenger apompopompo ndi makasitomala a imelo, azitsogolera. pakutsegula kwa PWA- mapulogalamuwa, osati tsamba latsopano la msakatuli.
• Ndizotheka kukweza mafayilo a CSS pogwiritsa ntchito mawu oti "import", ofanana ndi kutsitsa ma module a JavaScript, omwe ndi abwino popanga zinthu zanu ndipo amakulolani kuchita popanda kugawa masitayelo pogwiritsa ntchito JavaScript code. lowetsani pepala kuchokera ku './styles.css' assert {mtundu: 'css'}; document.adoptedStyleSheets = [tsamba]; shadowRoot.adoptedStyleSheets = [tsamba];
• Njira yatsopano yosasunthika, AbortSignal.abort(), yaperekedwa yomwe imabweza chinthu cha AbortSignal chomwe chakhazikitsidwa kale kuti chichotsedwe. M'malo mwa mizere ingapo ya ma code kuti mupange chinthu cha AbortSignal chomwe chatayidwa, mutha kudutsa ndi mzere umodzi wa "return AbortSignal.abort()".
• Chinthu cha Flexbox chawonjezera kuthandizira pa chiyambi, mapeto, kudziyambitsa, kudziletsa, kumanzere ndi kumanja mawu osakira, kugwirizanitsa pakati, flex-start ndi flex-end keywords ndi zida zogwirizanitsa zosavuta za malo osinthika.
• Wopanga Zolakwitsa () amagwiritsa ntchito chinthu chatsopano "choyambitsa", chomwe chimakupatsani mwayi wophatikiza zolakwika wina ndi mnzake. const parentError = Cholakwika chatsopano('kholo'); const error = Cholakwika chatsopano ('kholo', {choyambitsa: parentError}); console.log(error.cause === parentError); // → zoona
• Thandizo lowonjezera la noplaybackrate mode ku katundu wa HTMLMediaElement.controlsList, zomwe zimakulolani kuti muyimitse zinthu za mawonekedwe omwe amaperekedwa mu msakatuli kuti musinthe liwiro la kusewera kwa multimedia.
• Onjezani mutu wa Sec-CH-Prefers-Color-Scheme, womwe umalola, potumiza pempho, kutumiza zidziwitso za mtundu womwe wogwiritsa ntchito amakonda womwe umagwiritsidwa ntchito muzofunso zapa media "zokonda-color-scheme", zomwe zipangitsa kuti tsambalo liziyenda bwino. kutsitsa kwa CSS komwe kumalumikizidwa ndi chiwembu chosankhidwa ndikupewa masinthidwe owoneka kuchokera kuzinthu zina.
• Anawonjezera katundu wa Object.hasOwn, womwe ndi mtundu wosavuta wa Object.prototype.hasOwnProperty, womwe wakhazikitsidwa ngati njira yokhazikika. Object.hasOwn({ prop: 42}, 'prop') // → zoona
• Zopangidwira kuti ziphatikizidwe mwachangu kwambiri, wopanga JIT wa Sparkplug wawonjezera njira yochitira batch kuti achepetse kuchuluka kwamasamba amakumbukidwe pakati pamitundu yolembera ndi kuyendetsa. Sparkplug tsopano imapanga ntchito zingapo nthawi imodzi ndikuyitanitsa mprotect kamodzi kuti asinthe zilolezo za gulu lonse. Njira yomwe ikufunsidwa imachepetsa kwambiri nthawi yophatikiza (mpaka 44%) popanda kusokoneza magwiridwe antchito a JavaScript.
• Mtundu wa Android umalepheretsa chitetezo cha injini ya V8 motsutsana ndi zida zam'mbali monga Specter, zomwe sizimaganiziridwa kuti ndizothandiza ngati kudzipatula kwamasamba mosiyanasiyana. M'mawonekedwe apakompyuta, njirazi zidayimitsidwa mmbuyo pakutulutsidwa kwa Chrome 70. Kulepheretsa kufufuza kosafunikira kumaloledwa kuwonjezera ntchito ndi 2-15%.
• Kuwongolera kwapangidwa kwa zida za opanga mawebusayiti. Mumayendedwe oyendera mapepala, ndizotheka kusintha mafunso opangidwa pogwiritsa ntchito mawu akuti @container. Mu mawonekedwe owunikira maukonde, chithunzithunzi chazinthu zomwe zili mumtundu wa Web bundle zimakhazikitsidwa. Mu web console, zosankha zokopera zingwe mumtundu wa JavaScript kapena JSON literals zawonjezedwa pazosankha. Kuwongolera zolakwika zokhudzana ndi CORS (Cross-Origin Resource Sharing) zokhudzana ndi zolakwika.

Kuphatikiza pazatsopano ndi kukonza zolakwika, mtundu watsopano umachotsa zovuta 27. Zofooka zambiri zidadziwika chifukwa choyesa zokha pogwiritsa ntchito AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer ndi zida za AFL. Palibe zovuta zomwe zadziwika zomwe zingalole kuti munthu adutse milingo yonse yachitetezo cha asakatuli ndikuyika ma code padongosolo kunja kwa sandbox. Monga gawo la pulogalamu yolipira mphotho zandalama pozindikira zovuta zomwe zatulutsidwa pano, Google idapereka mphotho 19 zokwana $136500 (mphoto zitatu za $20000, mphotho imodzi ya $15000, mphotho zitatu za $10000, mphotho imodzi ya $7500, mphotho zitatu za $5000 ndi mphotho zitatu za $3000). Kukula kwa mphotho za 5 sikunadziwikebe.

Source: opennet.ru