Firefox 72 kumasulidwa

Msakatuli watulutsidwa Firefox 72ndipo mobile version Firefox 68.4 ya nsanja ya Android. Kuphatikiza apo, kusintha kwapangidwa nthambi ndi chithandizo cha nthawi yayitali 68.4.0. Kubwera posachedwa ku siteji kuyesa kwa beta nthambi ya Firefox 73 idzasuntha, kutulutsidwa komwe kukukonzekera February 11 (project kusunthidwa kwa masabata 4 chitukuko mkombero).

waukulu zatsopano:

• Mu kusakhulupirika muyezo kutsekereza akafuna kwa zili zosayenera kuphatikiza chitetezo pakutsata kwa ogwiritsa ntchito pogwiritsa ntchito njira zozindikiritsa zobisika ("zosindikiza zala msakatuli"), zomwe zimachitika ndi magulu owonjezera pamndandanda wa Disconnect.me, womwe umaphatikizapo makamu omwe apezeka kuti akugwiritsa ntchito zolembedwa pozizindikiritsa zobisika. Chidziwitso chobisika chimatanthawuza kusungidwa kwa zizindikiritso m'malo omwe sanasungidweko mpaka kalekale ("Supercookies"), komanso kupanga zozindikiritsa potengera zomwe sizikulunjika, monga. chophimba chophimba, mndandanda wamitundu yothandizidwa ya MIME, zosankha zamutu zamutu (HTTP / 2 и HTTPS), kusanthula kwakhazikitsidwa mapulagini ndi mafonti, kupezeka kwa ma API ena a Webusaiti okhudzana ndi makadi amakanema Mawonekedwe kupereka ndi WebGL ndi Canvas, kusokoneza ndi CSS, kusanthula kwa magwiridwe antchito ndi mbewa и kiyibodi.
  

• Adayatsidwa njira ndewu ndi zopempha zokwiyitsa kuti mupatse malo zilolezo zowonjezera (Notification.requestPermission(), PushManager.subscribe() ndi MediaDevices.getDisplayMedia()). Zopempha zovomerezeka zovomerezeka sizidzasokonezanso ntchito ndi msakatuli, koma zidzangotsogolera kuwonetsera chizindikiro mu bar ya adiresi pambuyo pogwirizana ndi tsamba (kudina pa mouse kapena makina osindikizira) atalembedwa. Masamba ambiri amasokoneza kuthekera kwa asakatuli kupempha zilolezo, makamaka pofunsa nthawi ndi nthawi kuti azidziwitse. Kusanthula kwa telemetry kunawonetsa kuti 97% ya zopempha zotere zimakanidwa, kuphatikiza mu 19% ya milandu yomwe wogwiritsa ntchito amatseka tsambalo popanda kudina batani lovomereza kapena kukana.
• Zowonjezedwa zoyesera thandizo HTTP/3 protocol (kuti mutsegule za:config muyenera kusankha "network.http.http3.enabled"). Thandizo la HTTP/3 mu Firefox lakhazikitsidwa neko, yolembedwa m'chinenero cha Rust, kukhazikitsa kasitomala ndi seva ya protocol ya QUIC (HTTP/3 standardizes kugwiritsa ntchito protocol ya QUIC ngati mayendedwe a HTTP/2).
• Mogwirizana ndi zofunikira za lamulo lomwe layamba kugwira ntchito CCPA (California Consumer Privacy Act) anawonjezera Kutha kufufuta data ya telemetry kuchokera ku seva za Mozilla. Deta imachotsedwa ngati mukukana kusonkhanitsa telemetry mu "za: zokonda#zinsinsi" (gawo la"Firefox Data Collection and Use"). Mukachotsa bokosi la "Lolani Firefox kutumiza deta yaukadaulo ndi yolumikizana ku Mozilla" yomwe imawongolera kutumiza ma telemetry, Mozilla. amachita pasanathe masiku 30 chotsani deta zonse zomwe zasonkhanitsidwa panthawi yomwe imayambitsa kulephera kutumiza kwa telemetry. Zomwe zimathera pa maseva a Mozilla panthawi yosonkhanitsa telemetry zikuphatikizapo zambiri zokhudzana ndi machitidwe a Firefox, chitetezo, ndi magawo ena onse monga chiwerengero cha ma tabo otseguka ndi nthawi ya gawo (zambiri zamasamba otsegulidwa ndi kufufuza sikufalitsidwa). Tsatanetsatane wazomwe zasonkhanitsidwa zitha kuwonedwa patsamba la "za:telemetry".
  

• Kwa Linux ndi macOS, kuthekera kowonera kanema mu Chithunzi-mu-Chithunzi chowonjezedwa, kukulolani kuti mutulutse kanemayo ngati zenera loyandama lomwe limawonekerabe mukamayenda mumsakatuli. Kuti muwone munjira iyi, muyenera dinani nsonga yazida kapena menyu yomwe ikuwonetsedwa mukadina kumanja pavidiyoyo, sankhani "Chithunzi pachithunzi" (pa YouTube, chomwe chimalowa m'malo mwake chowongolera menyu, muyenera kumanja- dinani kawiri kapena dinani ndi batani la Shift).
  

• Pamene mpukutu kapamwamba kuwonetsedwa okhudzidwa mtundu wakumbuyo wa tsamba lapano.
• Zachotsedwa mwayi zomangira makiyi a anthu onse (PKP, Public Key Pinning), zomwe zimalola, pogwiritsa ntchito mutu wa Public-Key-Pins HTTP, kudziwa bwino ziphaso zomwe maulamuliro a ziphaso angagwiritsidwe ntchito patsamba loperekedwa. Chifukwa chomwe chatchulidwa ndikufunika kocheperako kwa ntchitoyi, chiwopsezo cha zovuta zofananira (thandizo la PKP anasiya mu Chrome) ndikutha kuletsa tsamba lanu chifukwa chomanga makiyi olakwika kapena kutayika kwa makiyi (mwachitsanzo, kuchotsa mwangozi kapena kunyengerera chifukwa chakuba).
• The zikuchokera kuvomereza zigambakulola mu OpenBSD kuchita mafoni adongosolo tsegula () и lonjezo () zowonjezera mafayilo amafayilo ndikudzipatula.
• Chachotsedwa kuthandizira kutsekereza zithunzi kumadomeni amodzi. Chifukwa chochotsa ndi kusowa kwa kufunikira kwa ntchitoyi pakati pa ogwiritsa ntchito komanso mawonekedwe olakwika oletsa.
• Mu ma builds a Windows, chinthu choyesera chakhazikitsidwa kuti mugwiritse ntchito ziphaso zamakasitomala kuchokera m'sitolo ya satifiketi ya makina ogwiritsira ntchito (njira ya security.osclientcerts.autoload iyenera kutsegulidwa kuti ilowetse za:config).
• Thandizo la CSS Shadow Parts limayatsidwa mwachisawawa, kuphatikiza "mbali"ndi pseudo-element":: gawo", kukulolani kuti muwonetse zinthu zomwe mwasankha kuchokera Chithunzi cha DOM.

  
  Ndime
  

  ...mu CSS kuti musankhe zinthu zomwe zimagwirizanitsidwa ndi gawolo:

  mwambo-chinthu :: gawo (chitsanzo) {
  malire: olimba 1px wakuda;
  ma radius: 5px;
  padding: 5px;
  }

• Thandizo lachidziwitso chowonjezera CSS Motion Njira, zomwe zimakulolani kufotokozera njira ya zinthu zojambulidwa pogwiritsa ntchito CSS popanda kugwiritsa ntchito JavaScript code komanso popanda kuletsa njira yoperekera ndi yolowetsa panthawi yojambula. Ma CSS amaperekedwa kuti aziwongolera makanema
  kuthetsa,
  offset-njira,
  offset-nangula,
  offset-mtunda и
  kuzungulira-kuzungulira.

• Zosintha za CSS zosankhidwa zimayatsidwa mwachisawawa Kukula, sinthasintha и Tanthauzira, osati ku katundu kusandutsa (i.e. mu CSS mutha kutchulanso “mulingo: 2;” m’malo mwa “kusintha: sikelo(2);”).
• JavaScript imagwiritsa ntchito njira yolumikizirana "??", yomwe imabweza operand yakumanja ngati operand yakumanzere ili NULL kapena yosadziwika, mosemphanitsa. Mwachitsanzo, "const foo = bar ?? 'chingwe chosasinthika'" ngati bala ilibe kanthu idzabwezera mtengo wa bar, kuphatikiza pamene bala ili 0 ndi ' ', mosiyana ndi "||" woyendetsa.
• API Yowonjezera FormDataEvent ndi chochitika FomuData, zomwe zimapangitsa kuti agwiritse ntchito JavaScript kuti awonjezere deta ku fomuyo ikatumizidwa, popanda kusunga deta muzinthu zobisika zolowetsa.
• API Kutsekemera zasinthidwa kuti zigwirizane ndi mawonekedwe atsopano, mwachitsanzo otchedwa Coordinates to GeolocationCoordinates, Position to GeolocationPosition ndi
  PositionError mu GeolocationPositionError.

• Mu JavaScript debugger anawonjezera kuthandizira pakuwonongeka kokhazikika (malo owonera), amayamba pamene zinthu zina zasinthidwa kapena kuwerengedwa.
  

• Kuyambitsa kwa JavaScript debugger kwafulumizitsa pamene ma tabo ochuluka kwambiri atsegulidwa (choyamba, choyambirira tsopano chaperekedwa kwa ma tabo owoneka).
• Mawonekedwe Oyankhira Amagwiritsira ntchito kuyerekezera kwamitundu yosiyanasiyana ya meta viewport. Wowonjezera mtengo wa "prefers-color-scheme" kumawonekedwe owunikira masamba.
• В web consoles mumitundu yambiri yomasulira JavaScript, onjezerani thandizo losunga ndi kutsegula mafayilo pogwiritsa ntchito kuphatikiza Ctrl + O ndi Ctrl + S.
• Zowonjezedwa khazikitsani javascript.options.asyncstack kuti mulekanitse mauthenga aasynchronous pa intaneti. Mukatsegula zoikamo za console.trace () ndi console.error (), mndandanda wonse wa mafoni a synchronous ukuwonetsedwa, kukulolani kuti mumvetsetse momwe mungakhazikitsire nthawi, zochitika, malonjezo, majenereta, ndi zina zotero.
  

• Mumawonekedwe a WebSocket, kuyesa ndi kuwonetsetsa kwa metadata mumtundu wa SignalR wogwiritsidwa ntchito mu mauthenga a ASP.NET Core akhazikitsidwa. Ma Counter awonjezedwanso omwe amasonyeza kukula kwa deta yotumizidwa ndi kutsitsa.
• Mu chida chowunikira zochitika zapaintaneti mu tabu ya Timings padera zowonetsedwa zambiri za nthawi yomwe chida chilichonse chinaimiridwa kuti chitsitsidwe, nthawi yomwe kutsitsa kudayamba, komanso nthawi yotsitsa.
• Chilengedwe sichinaphatikizidwe ku zida za opanga mawebusayiti Chojambula, yopangidwira kuyesa JavaScript code (Scratchpad inasinthidwa m'mawu omaliza ndi makina amtundu wa intaneti).

Kuphatikiza pazatsopano ndi kukonza zolakwika, Firefox 72 yakonza 20 zofooka, zomwe 11 (zosonkhanitsidwa pansi CVE-2019-17025 и CVE-2019-17024) amalembedwa kuti atha kutsogola ku ma code owukira akamatsegula masamba opangidwa mwapadera. Tikukumbutseni kuti zovuta zamakumbukiro, monga kusefukira kwa buffer ndi mwayi wofikira malo okumbukira omwe amasulidwa kale, posachedwapa adadziwika kuti ndi owopsa, koma osati ovuta. Chodziwikanso kwambiri ndi nkhani ya CVE-2019-17017 mu code XPCVariant.cpp, yomwe ingathenso kubweretsa kupha ma code.

Source: opennet.ru