Msakatuli wa Firefox 102 watulutsidwa. Kutulutsidwa kwa Firefox 102 kumatchedwa Extended Support Service (ESR), yomwe zosintha zake zimatulutsidwa chaka chonse. Kuonjezera apo, kusinthidwa kwa nthambi yapitayi ndi nthawi yayitali yothandizira 91.11.0 yapangidwa (zosintha zina ziwiri 91.12 ndi 91.13 zikuyembekezeredwa m'tsogolomu). Nthambi ya Firefox 103 idzasamutsidwa kumalo oyesera beta m'maola akubwerawa, omwe akukonzekera Julayi 26.
Zatsopano zatsopano mu Firefox 102:
- Ndizotheka kuletsa kutsegula kwa gulu ndi zambiri za mafayilo otsitsidwa kumayambiriro kwa kutsitsa kwatsopano kulikonse.
- Chitetezo chowonjezera pakutsata zosintha zamasamba ena pokhazikitsa magawo mu URL. Chitetezo chimatsikira pakuchotsa magawo omwe amagwiritsidwa ntchito potsata (monga utm_source) kuchokera ku ulalo ndipo imayatsidwa mukatsegula njira yokhazikika yotsekereza zosafunikira (Chitetezo Chotsogola Chokhazikika -> Chokhwima) pazokonda kapena mukatsegula tsambalo kusakatula mwachinsinsi. mode. Kuvula kosankha kumathanso kuyatsidwa kudzera pa privacy.query_stripping.enabled setting in about:config.
- Ntchito zosinthira ma audio zimasunthidwa kunjira ina yokhala ndi kudzipatula kolimba kwa sandbox.
- Chithunzi-mu-chithunzichi chimapereka mawu ang'onoang'ono mukawonera makanema kuchokera ku HBO Max, Funimation, Dailymotion, Tubi, Disney + Hotstar ndi SonyLIV. M'mbuyomu, ting'onoting'ono tinkangowonetsedwa pa YouTube, Prime Video, Netflix ndi masamba ogwiritsa ntchito mawonekedwe a WebVTT (Web Video Text Track).
- Pa nsanja ya Linux, ndizotheka kugwiritsa ntchito ntchito ya Geoclue DBus kudziwa malo.
- Kuwoneka bwino kwa zolemba za PDF pamawonekedwe apamwamba kwambiri.
- M'mawonekedwe a okonza masamba, mu tabu ya Style Editor, chithandizo chawonjezedwa pakusefa masamba ndi mayina.
- Mitsinje API imawonjezera kalasi ya TransformStream ndi njira ya ReadableStream.pipeThrough, yomwe ingagwiritsidwe ntchito popanga ndi kupititsa deta mu mawonekedwe a chitoliro pakati pa ReadableStream ndi WritableStream, ndi kuthekera koyitana wothandizira kuti asinthe mtsinje pa -block maziko.
- Makalasi a ReadableStreamBYOBReader, ReadableByteStreamController ndi ReadableStreamBYOBrequest awonjezedwa ku Streams API kuti musamutsire mwachangu deta ya binary, kudutsa mizere yamkati.
- Katundu wosakhazikika, Window.sidebar, wongoperekedwa mu Firefox, wakonzedwa kuti achotsedwe.
- Kuphatikiza kwa CSP (Content-Security-Policy) ndi WebAssembly kwaperekedwa, zomwe zimakulolani kugwiritsa ntchito zoletsa za CSP ku WebAssembly. Tsopano chikalata chomwe script sichimayimitsidwa kudzera pa CSP sichidzatha kugwiritsa ntchito WebAssembly bytecode pokhapokha njira ya 'unsafe-eval' kapena 'wasm-unsafe-eval' yakhazikitsidwa.
- Mu CSS, mafunso azama TV amagwiritsa ntchito zosintha, zomwe zimakulolani kuti mugwirizane ndi chiwongoladzanja chosinthidwa chothandizidwa ndi chipangizo chotulutsa (mwachitsanzo, mtengowo umayikidwa "wochedwa" pazithunzi za e-book, "mwachangu" pazithunzi zokhazikika, ndi "palibe" pazosindikiza zosindikiza).
- Pazowonjezera zomwe zimathandizira mtundu wachiwiri wa chiwonetserochi, mwayi wopita ku Scripting API umaperekedwa, womwe umakupatsani mwayi woti muzitha kugwiritsa ntchito zolembedwa pamasamba, kuyika ndi kuchotsa CSS, ndikuwongoleranso kulembetsa zolemba zosinthidwa.
- Mu Firefox ya Android, mukadzaza mafomu ndi chidziwitso cha kirediti kadi, pempho lapadera limaperekedwa kuti musunge zomwe zalowetsedwa pamakina odzaza mafomu. Konzani vuto lomwe lidayambitsa ngozi mukatsegula kiyibodi yapa skrini ngati bolodilo lili ndi data yambiri. Tinathetsa vuto ndi Firefox kuyima posinthana ndi mapulogalamu.
Kuphatikiza pazatsopano ndi kukonza zolakwika, Firefox 102 imachotsa ziwopsezo za 22, zomwe 5 mwazo zimalembedwa kuti ndizowopsa. Vulnerability CVE-2022-34479 imalola pa nsanja ya Linux kuwonetsa zenera lodziwikiratu lomwe limadutsa ma adilesi (atha kugwiritsidwa ntchito kutengera mawonekedwe a msakatuli abodza omwe amasocheretsa wogwiritsa ntchito, mwachitsanzo, pachinyengo). Vulnerability CVE-2022-34468 imakupatsani mwayi wolambalala zoletsa za CSP zomwe zimaletsa kugwiritsa ntchito khodi ya JavaScript mu iframe kudzera pa URI "javascript:" yolowetsa ulalo. Zowopsa za 5 (zosonkhanitsidwa pansi pa CVE-2022-34485, CVE-2022-34485 ndi CVE-2022-34484) zimayambitsidwa ndi mavuto a kukumbukira, monga kusefukira kwa buffer komanso mwayi wofikira malo okumbukira omwe adamasulidwa kale. Mwina, mavutowa atha kupangitsa kuti munthu amene akuwukira ayambe kutulutsa masamba opangidwa mwapadera.
Source: opennet.ru