Chiwopsezo chomwe chimalola zowonjezera za Chrome kuti zigwiritse ntchito khodi yakunja ngakhale zilolezo

Lofalitsidwa njira yomwe imalola chowonjezera chilichonse cha Chrome kuti chigwiritse ntchito khodi ya JavaScript yakunja popanda kupereka zilolezo zowonjezera (popanda eval-eval ndi osatetezeka-inline mu manifest.json). Zilolezo zikutanthawuza kuti popanda chitetezo-chowonjezera chowonjezeracho chikhoza kungopanga kachidindo kamene kamaphatikizidwa ndi kugawa kwanuko, koma njira yomwe ikuperekedwayo imapangitsa kuti zitheke kuphwanya lamuloli ndikuchita JavaScript iliyonse yotulutsidwa kuchokera kumalo akunja malinga ndi zowonjezera- pa.

Google pakadali pano yatseka mwayi wopezeka ndi anthu onse lipoti lavuto, koma mu archive kusungidwa sampuli code kuti apeze vuto. Njira zofanana njira yodumpha malire a script-src 'self' mu CSP ndikufikira m'malo mwa script tag kudzera pa document.createElement('script') ndikuphatikizanso zakunja momwemo kudzera pakuchotsa, pambuyo pake codeyo idzaperekedwa mu. nkhani ya chowonjezera chokha.

Source: opennet.ru