Kutulutsidwa kwa Chrome 97

Google yavumbulutsa kutulutsidwa kwa msakatuli wa Chrome 97 Pa nthawi yomweyi, kumasulidwa kokhazikika kwa pulojekiti yaulere ya Chromium, yomwe imakhala ngati maziko a Chrome, ikupezeka. Msakatuli wa Chrome amasiyanitsidwa ndi kugwiritsa ntchito ma logo a Google, kukhalapo kwa dongosolo lotumizira zidziwitso pakagwa ngozi, ma module owonera makanema otetezedwa (DRM), kachitidwe kokhazikitsa zosintha zokha, komanso kutumiza magawo a RLZ pomwe. kufufuza. Kwa iwo omwe amafunikira nthawi yowonjezereka kuti asinthe, pali nthambi yosiyana Yowonjezereka Yokhazikika, yotsatiridwa ndi masabata a 8, yomwe imapanga kusintha kwa Chrome 96 yapitayi. Kutulutsidwa kotsatira kwa Chrome 98 kukukonzekera pa February 1st.

Zosintha zazikulu mu Chrome 97:

• Kwa ogwiritsa ntchito ena, wokonza amagwiritsira ntchito mawonekedwe atsopano poyang'anira deta yosungidwa pambali ya osatsegula ("chrome://settings/content/all"). Kusiyanitsa kwakukulu kwa mawonekedwe atsopano ndikuyang'ana kwake pakukhazikitsa zilolezo ndikuchotsa ma Cookies onse a tsambali nthawi imodzi, osatha kuwona zambiri za ma Cookies payekha ndikusankha ma Cookies. Malinga ndi Google, kupezeka kwa kasamalidwe ka ma Cookies kwa munthu wamba yemwe samamvetsetsa zovuta zakukula kwa intaneti kungayambitse kusokonezeka kosayembekezereka pakugwiritsa ntchito masamba chifukwa cha kusintha kosaganizira kwa magawo amunthu, komanso kulepheretsa mwangozi chinsinsi. njira zodzitetezera zomwe zimayendetsedwa ndi ma Cookies. Kwa iwo omwe akufunika kuwongolera ma Cookies pawokha, tikulimbikitsidwa kugwiritsa ntchito gawo loyang'anira zosungira mu zida za opanga intaneti (Applocation/Storage/Cookie).
• Mu chipika chokhala ndi zambiri za tsambali, kufotokozera mwachidule za tsambali (mwachitsanzo, kufotokoza kuchokera ku Wikipedia) kumawonetsedwa ngati njira yosaka ndi kukhathamiritsa imayendetsedwa pazikhazikiko (njira ya "Pangani kusaka ndi kusakatula bwino").
• Thandizo lotsogola lodzaza ma fomu awebusayiti. Malingaliro omwe ali ndi zosankha zodzaza zokha tsopano akuwonetsedwa ndikusintha pang'ono ndipo amaperekedwa ndi zithunzi zachidziwitso kuti muwone bwino komanso kuzindikiritsa mawonekedwe a kulumikizana ndi gawo lomwe likudzazidwa. Mwachitsanzo, chithunzithunzi chambiri chikuwonekeratu kuti kumalizidwa kokwanira kumakhudza magawo okhudzana ndi ma adilesi ndi zidziwitso.
• Yathandizira kuchotsedwa kwa ogwiritsa ntchito pamakumbukidwe atatseka mawindo asakatuli olumikizidwa nawo. M'mbuyomu, mbiri idakhalabe m'chikumbukiro ndikupitilizabe kugwira ntchito yokhudzana ndi kulunzanitsa ndikugwiritsa ntchito zolemba zowonjezera zakumbuyo, zomwe zidapangitsa kuti ziwonongeko zosafunikira pamakina omwe amagwiritsa ntchito mbiri zambiri nthawi imodzi (mwachitsanzo, mbiri ya alendo ndikulumikizana ndi akaunti ya Google. ). Kuonjezera apo, kuyeretsa bwino kwambiri deta yotsala pamene mukugwira ntchito ndi mbiriyi kumatsimikiziridwa.
• Tsamba lokonzedwa bwino lomwe lili ndi makina osakira ("Zikhazikiko> Sinthani injini zosakira"). Kutsegula kwa injini, zomwe zimaperekedwa potsegula tsamba kudzera mu OpenSearch script, zayimitsidwa - injini zatsopano zofufuzira mafunso kuchokera ku bar adiresi tsopano ziyenera kutsegulidwa pamanja pazikhazikiko (mainjini omwe adangotsegulidwa kale apitiliza ntchito popanda kusintha).
• Kuyambira pa Januware 17, Chrome Web Store sidzavomerezanso zowonjezera zomwe zimagwiritsa ntchito mtundu XNUMX wa chiwonetsero cha Chrome, koma opanga zowonjezera zomwe zidawonjezedwa m'mbuyomu azitha kufalitsa zosintha.
• Kuwonjezera thandizo loyesera la WebTransport specification, lomwe limafotokoza protocol ndi JavaScript API yotsagana nayo yotumizira ndi kulandira deta pakati pa msakatuli ndi SevaNjira yolankhulirana imakhazikitsidwa kudzera pa HTTP/3 pogwiritsa ntchito protocol ya QUIC ngati mayendedwe. WebTransport ingagwiritsidwe ntchito m'malo mwa WebSockets, zomwe zimapereka mphamvu zina monga kufalitsa mauthenga ambiri, kufalitsa mauthenga molunjika, kutumiza mauthenga osafunikira, komanso njira zotumizira zodalirika komanso zosadalirika. Kuphatikiza apo, WebTransport ingagwiritsidwe ntchito m'malo mwa Server Push, yomwe Google yaisiya mu Chrome.
• Njira za findLast ndi findLastIndex zawonjezedwa ku zinthu za Array ndi TypedArrays JavaScript, kukulolani kuti mufufuze zinthu zomwe zili ndi zotsatira zake zokhudzana ndi kumapeto kwa gululo. [1,2,3,4].findLast((el) => el % 2 === 0) // → 4 (chinthu chomaliza)
• Zotsekedwa (palibe "otseguka" mawonekedwe) zinthu za HTML , tsopano akhoza kusakidwa ndi kulumikizidwa, ndipo amawonjezedwa pogwiritsa ntchito kusaka masamba ndi kusuntha kwa zidutswa (ScrollToTextFragment).
• Zoletsa mu Mitu Yoyankha ya Ndondomeko Yoteteza Zinthu (CSP) Seva tsopano ikugwira ntchito kwa ogwira ntchito odzipereka, omwe kale ankaonedwa ngati zikalata zosiyana.
• Pempho lachidziwitso la olamulira kutsitsa zida zilizonse kuchokera pa netiweki yamkati laperekedwa - musanapeze netiweki yamkati kapena localhost, pempho la CORS (Cross-Origin Resource Sharing) lomwe lili ndi mutu wakuti "Access-Control-Request-Private- Network: true” tsopano yatumizidwa ku seva yayikulu yomwe ikufuna kutsimikizira ntchitoyo pobwezera mutu wa "Access-Control-Allow-Private-Network: true".
• Onjezani font-synthesis CSS katundu, omwe amakupatsani mwayi wowongolera ngati msakatuli angapangire masitayelo osowa (oblique, olimba ndi kapu yaying'ono) omwe sali m'gulu losankhidwa.
• Pakusintha kwa CSS, ntchito ya perspective() imagwiritsa ntchito parameter ya 'palibe', yomwe imatengedwa ngati mtengo wopanda malire pokonza makanema ojambula.
• The Permissions-Policy (Feature Policy) mutu wa HTTP, womwe umagwiritsidwa ntchito kupatsa mphamvu ndikuthandizira zida zapamwamba, tsopano umathandizira mtengo wamapu wa kiyibodi, womwe umalola kugwiritsa ntchito Keyboard API. Njira ya Keyboard.getLayoutMap() yakhazikitsidwa, yomwe imakupatsani mwayi wodziwa kuti ndi kiyi iti yomwe yasindikizidwa, poganizira masanjidwe a kiyibodi osiyanasiyana (mwachitsanzo, fungulo limatsitsidwa pamawonekedwe achi Russia kapena Chingerezi).
• Njira yowonjezera ya HTMLScriptElement.supports(), yomwe imagwirizanitsa tanthauzo la zinthu zatsopano zomwe zikupezeka mu "script", mwachitsanzo, mukhoza kupeza mndandanda wazinthu zothandizira "mtundu" wa "mtundu".
• Njira yosinthira mizere yatsopano potumiza mafomu awebusayiti yalumikizidwa ndi injini za asakatuli a Gecko ndi WebKit. Kukhazikika kwa ma linefeeds ndi kubweza magalimoto (kuchotsa / r ndi / n ndi \ r\n) mu Chrome tsopano kwachitika pamapeto omaliza m'malo moyambira kutumizira mawonekedwe (ie mapurosesa apakatikati omwe amagwiritsa ntchito chinthu cha FormData adzawona deta ngati kuwonjezeredwa ndi wogwiritsa ntchito, osati mwachizolowezi).
• Kutchula mayina azinthu kwakhazikitsidwa pa Client Hints API, yomwe ikupangidwa kuti ilowe m'malo mwa mutu wa User-Agent ndipo imakupatsani mwayi wosankha zambiri za msakatuli wina ndi magawo a dongosolo (mtundu, nsanja, ndi zina) pambuyo pake. pempho la seva. Katundu tsopano akutchulidwa ndi mawu oyamba "sec-ch-", mwachitsanzo, sec-ch-dpr, sec-ch-width, sec-ch-viewport-width, sec-ch-device-memory, sec-ch-rtt , sec-ch-downlink ndi sec-ch-ect.
• Gawo lachiwiri lakusiya kuthandizira kwa WebSQL API lagwiritsidwa ntchito, kupeza komwe kuchokera pazolemba za chipani chachitatu tsopano kutsekedwa. M'tsogolomu, tikukonzekera kuchotsa pang'onopang'ono chithandizo cha WebSQL kwathunthu, mosasamala kanthu za ntchito. Injini ya WebSQL imachokera pa SQLite code ndipo ikhoza kugwiritsidwa ntchito ndi omwe akuukira kuti agwiritse ntchito zofooka mu SQLite.
• Pa nsanja ya Windows, msonkhano wokhala ndi mayendedwe oyenda bwino (CFG, Control Flow Guard) umaphatikizidwa, kuletsa kuyesa kuyika kachidindo mu Chrome. Kuphatikiza apo, kudzipatula kwa sandbox tsopano kumagwiritsidwa ntchito ku mautumiki apaintaneti omwe akuyenda mosiyanasiyana, ndikuchepetsa kuthekera kwa code munjira izi.
• Chrome ya Android imaphatikizapo makina osinthira mosinthika chipika cha ziphaso zoperekedwa ndi zochotsedwa (Certificate Transparency), zomwe m'mbuyomu zidayendetsedwa ndi chindapusa pamakompyuta apakompyuta.
• Kuwongolera kwapangidwa kwa zida za opanga mawebusayiti. Thandizo loyesera pakulunzanitsa zosintha za DevTools pakati pazida zosiyanasiyana zakhazikitsidwa. Gulu latsopano la Recorder lawonjezeredwa, lomwe mutha kujambula, kusewera ndikusanthula zochita za ogwiritsa patsamba.

  Mukawonetsa zolakwika pawebusaitiyi, manambala amzati okhudzana ndi vutoli amawonetsedwa, omwe ndi osavuta kuthetsa mavuto mu JavaScript code minified. Mndandanda wa zida zomwe zingayesedwe kuti ziwunikire mawonekedwe amasamba pazida zam'manja zasinthidwa. Mu mawonekedwe osinthira midadada ya HTML (Sinthani ngati HTML), kuwunikira kwamasinthidwe ndi kuthekera komaliza kulowetsamo kwawonjezedwa.

  

Kuphatikiza pazatsopano ndi kukonza zolakwika, mtundu watsopano umachotsa zovuta 37. Zofooka zambiri zidadziwika chifukwa choyesera zokha pogwiritsa ntchito AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer ndi zida za AFL. Chimodzi mwazofooka chapatsidwa udindo wavuto lalikulu, kulola munthu kudutsa milingo yonse yachitetezo cha asakatuli ndikuyika ma code pa dongosolo, kunja kwa sandbox. Tsatanetsatane wa chiopsezo chachikulu (CVE-2022-0096) sichinafotokozedwe;

Monga gawo la pulogalamu yolipira mphotho zandalama pozindikira zovuta zomwe zatulutsidwa pano, Google idapereka mphotho 24 zokwana $54 zikwi (malipiro atatu a $10000, mphotho ziwiri za $5000, mphotho imodzi ya $4000, mphotho zitatu za $3000 ndi mphotho imodzi ya $1000). Kukula kwa mphotho 14 sikunadziwikebe.

Source: opennet.ru