{"id":39042,"date":"2019-10-31T22:27:33","date_gmt":"2019-10-31T19:27:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome\/"},"modified":"2019-10-31T22:27:33","modified_gmt":"2019-10-31T19:27:33","slug":"usilenie-izolyatsii-mezhdu-sajtami-v-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome","title":{"rendered":"\u00cent\u0103rirea izola\u021biei \u00eentre site-uri \u00een Chrome","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Compania Google a anun\u021bat<\/a><\/noindex> despre \u00eent\u0103rirea \u00een Chrome a modului izola\u021biei intersite<\/a><\/noindex>, care asigur\u0103 procesarea paginilor de pe diferite site-uri \u00een procese separate \u0219i izolate. Modului de izolare la nivel de site \u00eei permite utilizatorului s\u0103 se protejeze de atacuri care pot fi realizate prin blocuri externe utilizate pe site, cum ar fi inser\u021biile iframe, sau pentru a bloca scurgerea datelor prin integrarea unor blocuri legitime (de exemplu, cu solicit\u0103ri c\u0103tre servicii bancare, unde utilizatorul poate fi autentificat) pe site-uri mali\u021bioase.<\/p>\n

Prin separarea gestionatorilor lega\u021bi de domeniu, \u00een fiecare proces se afl\u0103 doar datele unui singur site, ceea ce \u00eengreuneaz\u0103 executarea atacurilor viz\u00e2nd capturarea datelor \u00eentre site-uri. \u00cen versiunile desktop ale Chrome separarea<\/a><\/noindex> gestionatorilor lega\u021bi de domeniu, \u0219i nu de tab, a fost implementat\u0103 \u00eencep\u00e2nd cu Chrome 67<\/a><\/noindex>. \u00cen Chrome 77<\/a><\/noindex> acest mod a fost activat \u0219i pentru platforma Android.
\n

\"\u00cent\u0103rirea<\/a><\/noindex><\/center><\/p>\n

Pentru a reduce costurile de operare, modul de izolare a site-urilor \u00een Android se activeaz\u0103 doar dac\u0103 pe pagin\u0103 este detectat\u0103 o autentificare prin parol\u0103. Chrome re\u021bine faptul utiliz\u0103rii parolei \u0219i activeaz\u0103 protec\u021bia \u0219i pentru toate acces\u0103rile ulterioare ale site-ului. Protec\u021bia se aplic\u0103 de asemenea imediat pentru lista favoritilor site-urilor predefinite, populare printre utilizatorii de dispozitive mobile. Metoda de activare selectiv\u0103 \u0219i optimiz\u0103rile ad\u0103ugate au permis men\u021binerea cre\u0219terii consumului de memorie din cauza num\u0103rului crescut de procese active la un nivel mediu de 3-5%, \u00een loc de 10-13%, observate atunci c\u00e2nd izola\u021bia este activat\u0103 pentru toate site-urile.<\/p>\n

Un nou mod de izolare a fost activat pentru 99% dintre utilizatorii Chrome 77 pe dispozitivele Android, echipate cu cel pu\u021bin 2 GB RAM (pentru 1% dintre utilizatori, modul a r\u0103mas dezactivat pentru a monitoriza performan\u021ba). Pute\u021bi activa sau dezactiva manual modul de izolare a site-urilor prin setarea \u201echrome:\/\/flags\/#enable-site-per-process\u201d.<\/p>\n

\u00cen versiunea desktop a Chrome, modul de izolare a site-urilor men\u021bionat mai sus a fost \u00eembun\u0103t\u0103\u021bit pentru a contracara atacurile menite s\u0103 compromit\u0103 complet procesul cu handler-ul de con\u021binut. Modul \u00eembun\u0103t\u0103\u021bit de izolare va ajuta la protejarea datelor site-urilor de dou\u0103 tipuri suplimentare de amenin\u021b\u0103ri: scurgeri de date cauzate de atacuri din canale externe, cum ar fi Spectre, \u0219i scurgeri dup\u0103 compromiterea complet\u0103 a procesului-handler, \u00een cazul exploat\u0103rii cu succes a vulnerabilit\u0103\u021bilor care permit preluarea controlului asupra procesului, dar care nu sunt suficiente pentru a ocoli izolarea sandbox. \u00cen Chrome pentru Android, o astfel de protec\u021bie va fi ad\u0103ugat\u0103 ulterior. <\/p>\n

Esencea metodei const\u0103 \u00een faptul c\u0103 procesul de gestionare \u021bine minte la ce site are acces procesul de lucru \u0219i interzice accesul la alte site-uri, chiar dac\u0103 atacatorul preia controlul asupra procesului \u0219i \u00eencearc\u0103 s\u0103 ob\u021bin\u0103 acces la resursele unui alt site. Limit\u0103rile vizeaz\u0103 resursele legate de autentificare (parolele salvate \u0219i cookie-urile), datele desc\u0103rcate direct prin re\u021bea (filtrate \u0219i legate de site-ul curent HTML, XML, JSON, PDF \u0219i alte tipuri de fi\u0219iere), datele din stoc\u0103rile interne (localStorage), permisiunile (permisiunile acordate site-ului pentru accesul la microfon etc.) \u0219i mesajele transmise prin API postMessage \u0219i BroadcastChannel. Toate aceste resurse sunt legate de eticheta site-ului de origine \u0219i sunt verificate de c\u0103tre procesul de gestionare pentru a determina posibilitatea transferului la cererea din procesul de lucru.<\/p>\n

Dintre evenimentele legate de Chrome, se mai poate men\u021biona \u00eenceput<\/a><\/noindex> aprobat\u0103 includerea \u00een Chrome a func\u021biei Scroll-To-Text<\/a><\/noindex>, oferind posibilitatea de a crea linkuri c\u0103tre cuvinte sau expresii separate, f\u0103r\u0103 a specifica \u00een mod explicit etichete \u00een document prin intermediul etichetei \u201ea name\u201d sau a propriet\u0103\u021bii \u201eid\u201d. Sintaxa acestor linkuri este planificat\u0103 pentru a fi aprobat\u0103 ca standard web, care este \u00eenc\u0103 \u00een stadiul brouillon<\/a><\/noindex>. Masca pentru tranzi\u021bie (care, \u00een esen\u021b\u0103, efectueaz\u0103 o c\u0103utare cu derulare) este separat\u0103 de ancor\u0103 prin semnul \u201e:~:\u201d. De exemplu, c\u00e2nd se deschide linkul \u201ehttps:\/\/opennet.ru\/51702\/#:~:text=Chrom\u0435\u201d, pagina se va deplasa la pozi\u021bia cu prima men\u021biune a cuv\u00e2ntului \u201eChrom\u0435\u201d \u0219i acest cuv\u00e2nt va fi eviden\u021biat. Aceast\u0103 func\u021bionalitate a fost ad\u0103ugat\u0103 \u00een ramura Canary<\/a><\/noindex>, dar pentru a fi activat\u0103 necesit\u0103 lansarea cu flagul \u201e--enable-blink-features=TextFragmentIdentifiers\u201d.<\/p>\n

O alt\u0103 modificare interesant\u0103 ce urmeaz\u0103 s\u0103 fie implementat\u0103 \u00een Chrome este<\/a><\/noindex> posibilitatea de a \u00eenghe\u021ba tab-urile inactive, permi\u021b\u00e2ndu-le s\u0103 fie desc\u0103rcate din memorie automat, atunci c\u00e2nd se afl\u0103 \u00een fundal mai mult de 5 minute \u0219i nu efectueaz\u0103 ac\u021biuni semnificative. Decizia privind adecvarea unei tab-uri pentru \u00eenghe\u021bare se ia pe baza euristicii. Modificarea a fost ad\u0103ugat\u0103 \u00een ramura Canary, pe baza c\u0103reia va fi realizat\u0103 versiunea Chrome 79, \u0219i se activeaz\u0103 prin flagul \u201echrome:\/\/flags\/#proactive-tab-freeze.\u201d<\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0438 \u0432 Chrome \u0440\u0435\u0436\u0438\u043c\u0430 \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0441 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u0445. \u0420\u0435\u0436\u0438\u043c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0430\u0439\u0442\u043e\u0432 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043e\u0442 \u0430\u0442\u0430\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u0431\u043b\u043e\u043a\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a iframe-\u0432\u0441\u0442\u0430\u0432\u043a\u0438, \u0438\u043b\u0438 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u0435 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u0431\u043b\u043e\u043a\u043e\u0432 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29290,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-39042","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00cent\u0103rirea izola\u021biei \u00eentre site-uri \u00een Chrome | ProHoster","description":"Compania Google a anun\u021bat \u00eent\u0103rirea modului \u00een Chrome","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0441\u0438\u043b\u0435\u043d\u0438\u0435 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u0441\u0430\u0439\u0442\u0430\u043c\u0438 \u0432 Chrome | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0438 \u0432 Chrome \u0440\u0435\u0436\u0438\u043c\u0430","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/usilenie-izolyatsii-mezhdu-sajtami-v-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:27:33+00:00","article:modified_time":"2019-10-31T19:27:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"39042","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 00:31:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:58:37","updated":"2026-01-24 00:31:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/39042","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=39042"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/39042\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/29290"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=39042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=39042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=39042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}