Firefox 76 kumasulidwa

Msakatuli watulutsidwa Firefox 76ndipo mobile version Firefox 68.8 ya nsanja ya Android. Kuphatikiza apo, kusintha kwapangidwa nthambi ndi chithandizo cha nthawi yayitali 68.8.0. Kubwera posachedwa ku siteji kuyesa kwa beta Nthambi ya Firefox 77 isuntha, kutulutsidwa komwe kukuyembekezeka pa Juni 2.

waukulu zatsopano:

• Zokulitsidwa Kuthekera kwa pulogalamu yowonjezera ya Lockwise yomwe ili mu msakatuli, yomwe imapereka mawonekedwe a "za: logins" poyang'anira mawu achinsinsi osungidwa. Chenjezo tsopano likuwonetsedwa pamaakaunti osungidwa okhudzana ndi masamba omwe adakumanapo ndi ma hacks okhala ndi mbiri yotsikitsitsa. Chenjezo likuwonetsedwa ngati mawu achinsinsi mu Firefox sanasinthidwe kuyambira pomwe tsambalo lidasokonezedwa.
  

  Chowonjezeranso ndi chenjezo loti mawu achinsinsi omwe amagwiritsidwa ntchito pamasamba angapo asokonezedwa. Ngati imodzi mwa maakaunti osungidwa ikukhudzidwa ndi kutayikira kovomerezeka ndipo wogwiritsa ntchito akugwiritsanso mawu achinsinsi omwewo patsamba lina, adzalangizidwa kuti asinthe mawu achinsinsi. Kutsimikizira kumachitika mwa kuphatikiza ndi database ya polojekiti haveibeenpwned.com, zomwe zimaphatikizapo zambiri za maakaunti 9.5 biliyoni omwe adabedwa chifukwa chobera masamba 443. Njira macheke ndizosadziwika ndipo zimachokera ku kutumiza kwa SHA-1 hash prefix kuchokera ku imelo (otchulidwa ochepa oyambirira), poyankha zomwe seva imapanga ma hashes amchira mogwirizana ndi pempho kuchokera ku database yake, ndipo osatsegula kumbali yake amawafufuza. ndi hashi yonse yomwe ilipo ndipo, ngati pali machesi, ipereka chenjezo (hashi yonse simafalitsidwa).

  

  Nambala ya masamba omwe ntchitoyi ikugwiritsidwira ntchito yawonjezedwa m'badwo wodziwikiratu mawu achinsinsi amphamvu polemba mafomu olembetsa. M'mbuyomu, lingaliro losonyeza mawu achinsinsi amphamvu linkawonetsedwa pokhapokha ngati panali minda ndi chikhalidwe "autocomplete = new-password". Mosasamala za tsamba lomwe lagwiritsidwa ntchito, mawu achinsinsi amatha kupangidwa kudzera mumenyu yankhani.

  

  Pa Windows ndi macOS, ngati Firefox ilibe mawu achinsinsi, zakhazikitsidwa kuthandizira kuwonetsa dialog yotsimikizika ya OS ndikulowetsa zidziwitso zamakina musanawone mawu achinsinsi osungidwa. Mukalowetsa mawu achinsinsi a dongosolo, mwayi wopeza mawu achinsinsi osungidwa umaperekedwa kwa mphindi 5, pambuyo pake mawu achinsinsi adzafunika kulowetsedwanso. Muyezo uwu udzateteza mbiri yanu kuti isayang'ane ngati kompyuta yatsala mosayang'aniridwa ngati mawu achinsinsi sanakhazikitsidwe mu msakatuli.

• Awonjezedwa boma ntchito"HTTPS Only", yomwe imayimitsidwa mwachisawawa. Makinawa akayatsidwa pogwiritsa ntchito gawo la "dom.security.https_only_mode" pafupifupi: config, zopempha zonse zomwe zapangidwa popanda kubisa zidzatumizidwanso kuti muteteze masamba omwe ali nawo ("http://" m'malo ku "https://"). Kusintha kumachitika pamlingo wazinthu zomwe zapakidwa masamba, komanso zikalowa mu bar ya adilesi. Ngati kuyesa kupeza adilesi yomwe yalowetsedwa mu bar ya adilesi kudzera pa https ikatha pakatha nthawi, wogwiritsa awonetsedwa tsamba lolakwika ndi batani kuti apemphe kudzera pa http://. Zikalephera pakutsitsa kudzera pa "https://" subresources zokwezedwa pakukonza tsamba, zolephera zotere sizidzanyalanyazidwa, koma machenjezo adzawonetsedwa pa intaneti, zomwe zitha kuwonedwa kudzera pazida zopanga masamba.
• Anawonjezera kuthekera kosintha mwachangu pakati pakuwona makanema mu "chithunzi pa chithunzi» (Chithunzi-mu-Chithunzi) ndi kuwonera kwathunthu. Wogwiritsa ntchito amatha kuchepetsa kanemayo pawindo laling'ono ndikugwiranso ntchito zina, kuphatikizapo mapulogalamu ena ndi pa desktops. Ngati mukufuna kutembenukira kuvidiyoyi, ingodinani pawiri kuti mupite kukawonera kwathunthu. Kudinanso kawiri kudzabwezeretsa mawonekedwe ku chithunzi-pa-chithunzi.
• Ntchito yachitika kuti ziwonekere komanso kuti zikhale zosavuta kugwira ntchito ndi ma adilesi. Mukatsegula tabu yatsopano, mthunzi wozungulira gawo la adilesi yachepetsedwa. Ma bookmarks bar awonjezedwa pang'ono kuti awonjezere malo omwe mungadulidwe pazithunzi zogwira.
• M'malo a Wayland pogwiritsa ntchito watsopano WebGL backend
  zakhazikitsidwa kuthekera kwa hardware mathamangitsidwe decoding wa VP9 ndi mavidiyo akamagwiritsa ntchito mu Firefox. Kuthamanga kumaperekedwa pogwiritsa ntchito VA-API (Video Acceleration API) ndi FFmpegDataDecoder (thandizo la H.264 lokha linagwiritsidwa ntchito pomasulidwa koyambirira). Kuti muwongolere ngati kufulumira kwayatsidwa, muyenera kuyika magawo "widget.wayland-dmabuf-webgl.enabled" ndi "widget.wayland-dmabuf-vaapi.enabled" pafupi ndi:config.

• Mu Windows, kwa ogwiritsa ntchito ma laputopu okhala ndi Intel GPU komanso mawonekedwe osapitilira 1920x1200, makina ophatikizika amayatsidwa mwachisawawa. WebRender, yolembedwa m'chinenero cha Rust ndi masamba akunja omwe amapereka ntchito ku mbali ya GPU.
• Thandizo la chinthu chowonjezera AudioWorklet, zomwe
  amalola kugwiritsa ntchito zolumikizira AudioWorkletProcessor и AudioWorkletNode, kuthamanga kunja kwa ulusi waukulu wakupha mu Firefox. API yatsopano imakupatsani mwayi wokonza zomvera munthawi yeniyeni, kuwongolera magawo amawu popanda kubweretsa kuchedwa kwina kapena kukhudza kukhazikika kwa mawuwo. Kukhazikitsidwa kwa AudioWorklet kunapangitsa kuti zitheke kulumikizana ndi mafoni a Zoom mu Firefox osayika zowonjezera zowonjezera, komanso zidapangitsa kuti zitheke zovuta zosinthira ma audio mu msakatuli, monga ma audio a spatial a machitidwe kapena masewera.

• Mu CSS anawonjezera mawu achinsinsi, yomwe imatanthauzira mtundu wamtundu wamtundu (CSS Colour Module Level 4).
• Opanga a Intl.NumberFormat, Intl.DateTimeFormat, ndi Intl.RelativeTimeFormat amathandizira kukonza zosankha za "numberingSystem" ndi "kalendala" mwachisawawa. Mwachitsanzo: "Intl.NumberFormat('en-US', { numberingSystem: 'latn' })" kapena "Intl.DateTimeFormat('th', { calendar: 'gregory' })".
• Kuletsa ma protocol osadziwika kumayatsidwa munjira monga "location.href" kapena .
• Mukayesa mawonedwe amasamba pazida zam'manja pogwiritsa ntchito Njira Yoyankhira pazida zopangira mawebusayiti, kuyerekezera kachitidwe kachipangizo kachipangizo kam'manja mukamagwira ma topi awiri amaperekedwa. Kupereka ma tag olondola a meta-viewport, komwe kunapangitsa kuti zitheke kukhathamiritsa masamba anu a Firefox a Android popanda foni yam'manja.
• Mu mawonekedwe oyang'anira zopempha za netiweki, mukadina kawiri pagawo lolekanitsa pamutu, kukula kwa gawo la tebulo kumangosinthidwa ku data yowonetsedwa.
• Fyuluta yatsopano ya Control yawonjezedwa ku mawonekedwe owunikira a WebSocket kuti awonetse mafelemu owongolera. Inakhazikitsa luso lowoneratu mauthenga mumtundu ActionCable, yomwe yawonjezeredwa pamndandanda wa ma protocol osinthidwa okha, ofanana ndi socket.io, SignalR ndi WAMP.
  

• JavaScript debugger tsopano ili ndi kuthekera konyalanyaza mafayilo omwe sakhudzidwa ndi vuto. Mndandanda wa "blackbox" umapereka zosankha zobisa zomwe zili mkati kapena kunja kwa chikwatu chomwe mwasankha m'mbali. Mukakopera ma stack, onetsetsani kuti njira yonse yayikidwa pa clipboard, osati dzina la fayilo.
  

• Mu web console, mumachitidwe amizere yambiri, ndizotheka kubisa zidutswa za code zopitirira mizere isanu (kuti muwonjezere, dinani kulikonse m'deralo ndi code yomwe ikuwonetsedwa).

Kuphatikiza pazatsopano ndi kukonza zolakwika, Firefox 76 yakonza 22 zofooka, omwe 10 (CVE-2020-12387, CVE-2020-12388 ndi 8 pansi pa CVE-2020-12395) amalembedwa kuti ndi ovuta komanso omwe angathe kutsogolere ku machitidwe a code of attacker potsegula masamba opangidwa mwapadera. Chiwopsezo cha CVE-2020-12388 chimakupatsani mwayi wotuluka m'malo a sandbox mu Windows pogwiritsa ntchito ma tokeni ofikira. Chiwopsezo cha CVE-2020-12387 chimalumikizidwa ndi mwayi wofikira kukumbukira komasulidwa kale (Gwiritsani ntchito-ufulu) pomwe Wogwiritsa Ntchito Webusaiti atha. CVE-2020-12395 imaphatikiza zovuta zamakumbukiro monga buffer kusefukira.

Source: opennet.ru