{"id":96168,"date":"2020-10-09T01:41:57","date_gmt":"2020-10-08T23:41:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/chrome-86"},"modified":"2020-10-09T01:41:57","modified_gmt":"2020-10-08T23:41:57","slug":"chrome-86","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/chrome-86","title":{"rendered":"Chrome 86","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Vy\u0161iel \u010fal\u0161\u00ed release Chrome 86 a stabiln\u00e9 vydanie Chromium.\n<\/p>\n<p>Hlavn\u00e9 zmeny v Chrome 86:<\/p>\n<ul>\n<li> ochrana pred nebezpe\u010dn\u00fdm odosielan\u00edm formul\u00e1rov na str\u00e1nkach na\u010d\u00edtan\u00fdch cez HTTPS, ale odosielaj\u00facich \u00fadaje cez HTTP.<\/li>\n<li> Zablokovanie nebezpe\u010dn\u00e9ho na\u010d\u00edtania (http) spustite\u013en\u00fdch s\u00faborov je doplnen\u00e9 o zablokovanie nebezpe\u010dn\u00e9ho na\u010d\u00edtania arch\u00edvov (zip, iso a pod.) a v\u00fdstrahy pri nebezpe\u010dnom na\u010d\u00edtan\u00ed dokumentov (docx, pdf a pod.). V \u010fal\u0161om vydan\u00ed sa o\u010dak\u00e1va zablokovanie dokumentov a v\u00fdstrahy pre obr\u00e1zky, textov\u00e9 a multimedi\u00e1lne s\u00fabory. Zablokovanie je realizovan\u00e9, preto\u017ee na\u010d\u00edtanie s\u00faborov bez \u0161ifrovania m\u00f4\u017ee by\u0165 pou\u017eit\u00e9 na vykonanie \u0161kodliv\u00fdch akci\u00ed prostredn\u00edctvom podvrhu obsahu pri MITM \u00fatokoch.<\/li>\n<li> V kontextovej ponuke je predvolen\u00e1 mo\u017enos\u0165 \u201eV\u017edy zobrazi\u0165 URL \u00faplne\u201c, pre ktor\u00fa bolo predt\u00fdm potrebn\u00e9 zmeni\u0165 parametre na str\u00e1nke about:flags. \u00dapln\u00e9 URL sa d\u00e1 tie\u017e zobrazi\u0165 dvojit\u00fdm kliknut\u00edm na adresn\u00fd riadok. Pripom\u00edname, \u017ee od Chrome 76 sa adresa predvolene zobrazuje bez protokolu a subdom\u00e9ny www. V Chrome 79 bola odstr\u00e1nen\u00e1 mo\u017enos\u0165 n\u00e1vratu k star\u00e9mu spr\u00e1vaniu, ale po nespokojnosti pou\u017e\u00edvate\u013eov bol v Chrome 83 pridan\u00fd nov\u00fd experiment\u00e1lny prep\u00edna\u010d, ktor\u00fd prid\u00e1va do kontextovej ponuky polo\u017eku na vypnutie skrytia a zobrazenie \u00fapln\u00e9ho URL za ak\u00fdchko\u013evek podmienok.<br \/>\n<noindex>Pre mal\u00fd percentu\u00e1lny podiel pou\u017e\u00edvate\u013eov prebieha experiment, ktor\u00fd predvolene zobrazuje v adresnom riadku iba dom\u00e9nu, bez prvkov cesty a parametrov dopytu. Napr\u00edklad, namiesto<a rel=\"nofollow\" href=\"https:\/\/example.com\/secure-google-sign-in\/&quot;\">https:\/\/example.com\/secure-google-sign-in\/&quot;<\/a> bude zobrazen\u00e9 \u201eexample.com\u201c. Zavedenie navrhovan\u00e9ho re\u017eimu pre v\u0161etk\u00fdch pou\u017e\u00edvate\u013eov sa o\u010dak\u00e1va v niektor\u00fdch z nadch\u00e1dzaj\u00facich vydan\u00ed. Pre vypnutie uveden\u00e9ho spr\u00e1vania mo\u017eno pou\u017ei\u0165 mo\u017enos\u0165 \u201eV\u017edy zobrazi\u0165 URL \u00faplne\u201c, a pre zobrazenie cel\u00e9ho URL sa d\u00e1 klikn\u00fa\u0165 na adresn\u00fd riadok. Ako motiv\u00e1cia na zmenu sa uv\u00e1dza snaha chr\u00e1ni\u0165 pou\u017e\u00edvate\u013eov pred phishingom, ktor\u00fd manipuluje s parametrami v URL \u2014 zlo\u010dinci vyu\u017e\u00edvaj\u00fa nepozornos\u0165 pou\u017e\u00edvate\u013eov na vytvorenie il\u00fazie otvorenia inej str\u00e1nky a vykonanie podvodn\u00fdch \u010dinov (k\u00fdm pre technicky zdatn\u00e9ho pou\u017e\u00edvate\u013ea s\u00fa tak\u00e9to podvody o\u010dividn\u00e9, be\u017en\u00ed u\u017e\u00edvatelia \u013eahko pod\u013eahn\u00fa tak\u00fdmto jednoduch\u00fdm manipul\u00e1ci\u00e1m).<\/li>\n<li> Obnovila sa iniciat\u00edva na odstr\u00e1nenie podpory FTP. V Chrome 86 je FTP predvolene vypnut\u00e9 pre asi 1 % pou\u017e\u00edvate\u013eov a v Chrome 87 sa pl\u00e1nuje zv\u00fd\u0161i\u0165 pokrytie vypnutia na 50 %, ale podporu bude mo\u017en\u00e9 obnovi\u0165 pomocou prep\u00edna\u010da \u201e\u2014enable-ftp\u201c alebo \u201e\u2014enable-features=FtpProtocol\u201c. V Chrome 88 bude podpora FTP \u00faplne vypnut\u00e1.<\/li>\n<li> V verzii pre Android je podobne ako v desktopovej verzii implementovan\u00e1 kontrola ulo\u017een\u00fdch prihlasovac\u00edch \u00fadajov a hesiel vo\u010di datab\u00e1ze s kompromitovan\u00fdmi \u00fa\u010dtami, pri\u010dom sa zobraz\u00ed varovanie v pr\u00edpade identifik\u00e1cie probl\u00e9mov alebo pokusu o pou\u017eitie trivi\u00e1lnych hesiel. Kontrola sa vykon\u00e1va vo\u010di datab\u00e1ze, ktor\u00e1 pokr\u00fdva viac ako 4 miliardy kompromitovan\u00fdch \u00fa\u010dtov, ktor\u00e9 sa objavili v \u00fanikoch pou\u017e\u00edvate\u013esk\u00fdch datab\u00e1z. Na ochranu s\u00fakromia sa pou\u017e\u00edva porovn\u00e1vanie hash prefixu na strane u\u017e\u00edvate\u013ea, pri\u010dom samotn\u00e9 hesl\u00e1 a ich kompletn\u00e9 hashe sa nepren\u00e1\u0161aj\u00fa von.<\/li>\n<li> Do verzie pre Android bola prenesen\u00e1 aj tla\u010didlo \u201eKontrola bezpe\u010dnosti\u201c (Safety check) a roz\u0161\u00edren\u00fd re\u017eim ochrany pred nebezpe\u010dn\u00fdmi str\u00e1nkami (Enhanced Safe Browsing). Tla\u010didlo \u201eSafety check\u201c zobrazuje preh\u013ead mo\u017en\u00fdch bezpe\u010dnostn\u00fdch probl\u00e9mov, ako je pou\u017eitie kompromitovan\u00fdch hesiel, stav kontroly \u0161kodliv\u00fdch str\u00e1nok (Safe Browsing), pr\u00edtomnos\u0165 nein\u0161talovan\u00fdch aktualiz\u00e1ci\u00ed a identifik\u00e1cia \u0161kodliv\u00fdch doplnkov. Roz\u0161\u00edren\u00fd re\u017eim ochrany aktivuje dodato\u010dn\u00e9 kontroly na ochranu pred phishingom, \u0161kodlivou aktivitou a in\u00fdmi hrozbami na webe, a tie\u017e zah\u0155\u0148a dodato\u010dn\u00fa ochranu pre \u00fa\u010det Google a slu\u017eby Google (Gmail, Drive a pod.). Ak s\u00fa v be\u017enom re\u017eime Safe Browsing kontroly vykon\u00e1van\u00e9 lok\u00e1lne na z\u00e1klade \u010dasovo s\u0165ahovanej datab\u00e1zy do syst\u00e9mu klienta, v Enhanced Safe Browsing sa inform\u00e1cie o str\u00e1nkach a s\u0165ahovaniach v re\u00e1lnom \u010dase odosielaj\u00fa na kontrolu na strane Google, \u010do umo\u017e\u0148uje r\u00fdchlo reagova\u0165 na hrozby hne\u010f po ich zisten\u00ed, bez \u010dakania na aktualiz\u00e1ciu lok\u00e1lneho \u010dierneho zoznamu.<\/li>\n<li> Pridan\u00e1 podpora s\u00faboru-indik\u00e1tora \".well-known\/change-password\", pomocou ktor\u00e9ho m\u00f4\u017eu vlastn\u00edci str\u00e1nok uvies\u0165 adresu webovej formul\u00e1re na zmenu hesla. V pr\u00edpade zistenia kompromit\u00e1cie prihlasovac\u00edch \u00fadajov Chrome teraz okam\u017eite pon\u00fakne pou\u017e\u00edvate\u013eovi formul\u00e1r na zmenu hesla, ur\u010den\u00fd na z\u00e1klade inform\u00e1ci\u00ed z tohto s\u00faboru.<\/li>\n<li> Implementovan\u00e9 zobrazenie nov\u00e9ho varovania \u201eSafety Tip\u201c, ktor\u00e9 sa zobrazuje pri otv\u00e1ran\u00ed str\u00e1nok, ktor\u00fdch dom\u00e9na je ve\u013emi podobn\u00e1 inej str\u00e1nke a heuristika ukazuje, \u017ee je vysok\u00e1 pravdepodobnos\u0165 spoofingu (napr\u00edklad otvoren\u00e9 goog0le.com namiesto google.com).\n<p>* Implementovan\u00e1 podpora cache pre prechody (Back-forward cache), zabezpe\u010duj\u00faca okam\u017eit\u00fd prechod pri pou\u017e\u00edvan\u00ed tla\u010didiel \u201eSp\u00e4\u0165\u201c a \u201eVpred\u201c alebo pri navig\u00e1cii po predt\u00fdm nav\u0161t\u00edven\u00fdch str\u00e1nkach aktu\u00e1lnej str\u00e1nky. Cache sa aktivuje pomocou nastavenia chrome:\/\/flags\/#back-forward-cache.<\/p>\n<\/li>\n<li> Optimaliz\u00e1cia vyu\u017e\u00edvania CPU zdrojov oknami mimo vidite\u013enej oblasti. Chrome kontroluje, \u010di okno prehliada\u010da nie je zakryt\u00e9 in\u00fdmi oknami, a vylu\u010duje vykres\u013eovanie pixelov v prekr\u00fdvaj\u00facich sa oblastiach. Uveden\u00e1 optimaliz\u00e1cia bola zapnut\u00e1 pre mal\u00e9 percento pou\u017e\u00edvate\u013eov v Chrome 84 a 85, a teraz je aktivovan\u00e1 v\u0161ade. V porovnan\u00ed s predch\u00e1dzaj\u00facimi verziami bola tie\u017e odstr\u00e1nen\u00e1 nekompatibilita so syst\u00e9mami virtualiz\u00e1cie, ktor\u00e1 sp\u00f4sobovala zobrazenie pr\u00e1zdnych bielych str\u00e1nok.<\/li>\n<li> Posilnen\u00e9 obmedzenie zdrojov pre pozadov\u00e9 karty. Tieto karty teraz nem\u00f4\u017eu spotrebova\u0165 viac ako 1% CPU zdrojov a m\u00f4\u017eu sa aktivova\u0165 najviac raz za min\u00fatu. Po piatich min\u00fatach v pozad\u00ed s\u00fa karty zmrazen\u00e9, s v\u00fdnimkou kariet, na ktor\u00fdch sa prehr\u00e1va multimedi\u00e1lny obsah alebo prebieha nahr\u00e1vanie.<\/li>\n<li> Pokra\u010duje pr\u00e1ca na unifik\u00e1cii HTTP hlavi\u010dky User-Agent. V novej verzii je pre v\u0161etk\u00fdch pou\u017e\u00edvate\u013eov aktivovan\u00e1 podpora mechanizmu User-Agent Client Hints, vyv\u00edjan\u00e9ho ako n\u00e1hrada za User-Agent. Nov\u00fd mechanizmus zah\u0155\u0148a selekt\u00edvne poskytovanie \u00fadajov o konkr\u00e9tnych parametroch prehliada\u010da a syst\u00e9mu (verzia, platforma at\u010f.) iba na po\u017eiadanie serverom a d\u00e1va pou\u017e\u00edvate\u013eom mo\u017enos\u0165 selekt\u00edvne poskytova\u0165 podobn\u00e9 inform\u00e1cie vlastn\u00edkom webov\u00fdch str\u00e1nok. Pri pou\u017e\u00edvan\u00ed User-Agent Client Hints sa identifik\u00e1tor predvolene nepren\u00e1\u0161a bez v\u00fdslovn\u00e9ho po\u017eiadania, \u010do znemo\u017e\u0148uje pas\u00edvnu identifik\u00e1ciu (predvolene je uveden\u00e9 iba meno prehliada\u010da).<\/noindex><br \/>\nZmenen\u00e1 indik\u00e1cia pr\u00edtomnosti aktualiz\u00e1cie a potreby re\u0161tartovania prehliada\u010da na jej in\u0161tal\u00e1ciu. Namiesto farebnej \u0161\u00edpky v poli avatara \u00fa\u010dtu sa teraz zobrazuje n\u00e1pis \u201eUpdate\u201c.<\/li>\n<li> Bola vykonan\u00e1 pr\u00e1ca na preklade prehliada\u010da na pou\u017eitie inkluz\u00edvnej terminol\u00f3gie. V n\u00e1zvoch polit\u00edk boli slov\u00e1 \u201ewhitelist\u201c a \u201eblacklist\u201c nahraden\u00e9 pojmami \u201eallowlist\u201c a \u201eblocklist\u201c (u\u017e pridelen\u00e9 politiky bud\u00fa na\u010falej fungova\u0165, ale bude sa zobrazova\u0165 varovanie o prechode na zastaran\u00e9). V k\u00f3de a n\u00e1zvoch s\u00faborov boli zmienky o \u201eblacklist\u201c nahraden\u00e9 v\u00fdrazom \u201eblocklist\u201c. Vidite\u013en\u00e9 zmienky o \u201eblacklist\u201c a \u201ewhitelist\u201c boli nahraden\u00e9 u\u017e na za\u010diatku roka 2019.<br \/>\nBola pridan\u00e1 experiment\u00e1lna funkcia na \u00fapravu ulo\u017een\u00fdch hesiel, aktivovan\u00e1 pomocou pr\u00edznaku \u201echrome:\/\/flags\/#edit-passwords-in-settings\u201c.<\/li>\n<li> API Native File System bolo preveden\u00e9 do stabiln\u00e9ho a verejne pr\u00edstupn\u00e9ho stavu, ktor\u00fd umo\u017e\u0148uje vytv\u00e1ra\u0165 webov\u00e9 aplik\u00e1cie, ktor\u00e9 interaguj\u00fa so s\u00fabormi v miestnej s\u00faborovej s\u00fastave. Napr\u00edklad toto nov\u00e9 API m\u00f4\u017ee by\u0165 u\u017eito\u010dn\u00e9 v integrovan\u00fdch v\u00fdvojov\u00fdch prostrediach, textov\u00fdch editoroch, editoroch obr\u00e1zkov a videa spusten\u00fdch v prehliada\u010di. Na z\u00edskanie mo\u017enosti priam\u00e9ho \u010d\u00edtania a z\u00e1pisu s\u00faborov alebo pou\u017e\u00edvania dial\u00f3gov na otv\u00e1ranie a ukladanie s\u00faborov, ako aj na navig\u00e1ciu po obsahu adres\u00e1rov, aplik\u00e1cia po\u017eaduje od pou\u017e\u00edvate\u013ea \u0161peci\u00e1lne potvrdenie.<\/li>\n<li> Bol pridan\u00fd CSS selektor \":focus-visible\", ktor\u00fd pou\u017e\u00edva rovnak\u00fa heuristiku, ak\u00fa pou\u017e\u00edva prehliada\u010d pri rozhodovan\u00ed o zobrazen\u00ed indik\u00e1tora zmeny zamerania (pri pres\u00favan\u00ed zamerania na tla\u010didlo pomocou kl\u00e1vesov\u00fdch skratiek sa indik\u00e1tor objav\u00ed, ale pri kliknut\u00ed my\u0161ou \u2014 nie). Predt\u00fdm dostupn\u00fd CSS selektor \":focus\" v\u017edy zv\u00fdraz\u0148uje zameranie. Okrem toho bola do nastaven\u00ed pridan\u00e1 mo\u017enos\u0165 \u201eQuick Focus Highlight\u201c, pri ktorej sa ved\u013ea akt\u00edvnych prvkov zobraz\u00ed doplnkov\u00fd indik\u00e1tor zamerania, ktor\u00fd zost\u00e1va vidite\u013en\u00fd, aj ke\u010f s\u00fa na str\u00e1nke pomocou CSS vypnut\u00e9 prvky \u0161t\u00fdlu na vizu\u00e1lne zv\u00fdraznenie zamerania.<\/li>\n<li> Do re\u017eimu Origin Trials (experiment\u00e1lne funkcie, ktor\u00e9 vy\u017eaduj\u00fa samostatn\u00fa aktiv\u00e1ciu) bolo pridan\u00fdch nieko\u013eko nov\u00fdch API. Origin Trial umo\u017e\u0148uje pr\u00edstup k uveden\u00e9mu API z aplik\u00e1ci\u00ed na\u010d\u00edtan\u00fdch z localhost alebo 127.0.0.1, alebo po registr\u00e1cii a z\u00edskan\u00ed \u0161peci\u00e1lneho tokenu, ktor\u00fd plat\u00ed obmedzen\u00fd \u010das pre konkr\u00e9tnu str\u00e1nku.<\/li>\n<li> API WebHID pre n\u00edzko\u00farov\u0148ov\u00fd pr\u00edstup k HID zariadeniam (Human interface device, kl\u00e1vesnice, my\u0161i, hern\u00e9 ovl\u00e1da\u010de, dotykov\u00e9 panely), ktor\u00e9 umo\u017e\u0148uje implementova\u0165 logiku pr\u00e1ce s HID zariaden\u00edm v JavaScripte na organiz\u00e1ciu funk\u010dnosti so zriedkav\u00fdmi HID zariadeniami bez potreby \u0161pecifick\u00fdch ovl\u00e1da\u010dov v syst\u00e9me. Predov\u0161etk\u00fdm je nov\u00e9 API zameran\u00e9 na poskytovanie podpory pre hern\u00e9 ovl\u00e1da\u010de.<\/li>\n<li> API Screen Information roz\u0161iruje mo\u017enosti API Window Placement s podporou konfigur\u00e1ci\u00ed viacer\u00fdch obrazoviek. Na rozdiel od window.screen nov\u00fd API umo\u017e\u0148uje manipul\u00e1ciu s umiestnen\u00edm okna v spolo\u010dnom obrazovom prostred\u00ed syst\u00e9mov s viacer\u00fdmi monitormi, bez obmedzenia na aktu\u00e1lnu obrazovku.<\/li>\n<li> Meta-tag battery-savings, ktor\u00fd umo\u017e\u0148uje webovej str\u00e1nke informova\u0165 prehliada\u010d o potrebe aktivova\u0165 re\u017eimy zn\u00ed\u017eenia spotreby energie a optimaliz\u00e1cie z\u00e1\u0165a\u017ee na CPU.<\/li>\n<li> API COOP Reporting na informovanie o potenci\u00e1lnych poru\u0161eniach re\u017eimov izol\u00e1cie Cross-Origin-Embedder-Policy (COEP) a Cross-Origin-Opener-Policy (COOP), bez pou\u017eitia skuto\u010dn\u00fdch obmedzen\u00ed.<\/li>\n<li> V API Credential Management bol navrhnut\u00fd nov\u00fd typ \u00fadajov PaymentCredential, ktor\u00fd poskytuje dodato\u010dn\u00e9 overenie vykon\u00e1van\u00fdch platieb. Overuj\u00faca strana, napr\u00edklad banka, m\u00e1 mo\u017enos\u0165 vygenerova\u0165 verejn\u00fd k\u013e\u00fa\u010d PublicKeyCredential, ktor\u00fd m\u00f4\u017ee by\u0165 po\u017eadovan\u00fd predajcom na dodato\u010dn\u00e9 bezpe\u010dn\u00e9 potvrdenie platby.<\/li>\n<li> V API PointerEvents bola pridan\u00e1 podpora uhlu sklonu stylusu* pri stanoven\u00ed v\u00fd\u0161ky (uhol medzi stylusom a obrazovkou) a azimutu (uhol medzi osou X a projekciou stylusu na obrazovku), namiesto uhlov TiltX a TiltY (uhly medzi rovinou stylusu a jednou z os\u00ed a rovinou os\u00ed Y a Z). Takisto boli pridan\u00e9 funkcie na prevod medzi v\u00fd\u0161kou\/azimutom a TiltX\/TiltY.<\/li>\n<li> Encoding of spaces in URLs has been changed; when calculated in protocol handlers, the method navigator.registerProtocolHandler() now replaces spaces with \u00ab\u00bb instead of \u00ab+\u00bb, aligning its behavior with other browsers like Firefox.<\/li>\n<li> Do CSS bol pridan\u00fd pseudo-element \"::marker\", ktor\u00fd umo\u017e\u0148uje nastavi\u0165 farbu, ve\u013ekos\u0165, tvar a typ \u010d\u00edsel a bodiek pre zoznamy v blokoch <ul> a <ol>.<\/li>\n<li> Pridan\u00e1 podpora HTTP hlavi\u010dky Document-Policy, ktor\u00e1 umo\u017e\u0148uje nastavi\u0165 pravidl\u00e1 pr\u00edstupu k dokumentom, podobne ako mechanizmus sandbox izol\u00e1cie pre iframe, ale univerz\u00e1lnej\u0161ie. Napr\u00edklad, prostredn\u00edctvom Document-Policy je mo\u017en\u00e9 obmedzi\u0165 pou\u017e\u00edvanie nekvalitn\u00fdch obr\u00e1zkov, vypn\u00fa\u0165 pomal\u00e9 JavaScript API, nastavi\u0165 pravidl\u00e1 pre na\u010d\u00edtanie iframe, obr\u00e1zkov a skriptov, obmedzi\u0165 celkov\u00fa ve\u013ekos\u0165 dokumentu a prenos, zak\u00e1za\u0165 met\u00f3dy ved\u00face k prekresleniu str\u00e1nky a vypn\u00fa\u0165 funkciu Scroll-To-Text.<\/li>\n<li> Do elementu <fieldset> bola pridan\u00e1 podpora pre parametre \u2018inline-grid\u2019, \u2018grid\u2019, \u2018inline-flex\u2019 a \u2018flex\u2019, ktor\u00e9 sa nastavuj\u00fa pomocou CSS vlastnosti \u2018display\u2019.<\/li>\n<li> Pridan\u00e1 met\u00f3da ParentNode.replaceChildren() na nahradenie v\u0161etk\u00fdch podriaden\u00fdch prvkov rodi\u010dovsk\u00e9ho uzla in\u00fdm DOM uzlom. Predt\u00fdm sa na nahradenie uzlov mohlo pou\u017ei\u0165 kombin\u00e1cia met\u00f3d node.removeChild() a node.append() alebo node.innerHTML a node.append().<\/li>\n<li> Roz\u0161\u00edril sa rozsah sch\u00e9m URL povolen\u00fdch na prep\u00edsanie pomocou registerProtocolHandler(). Do zoznamu sch\u00e9m boli pridan\u00e9 decentralizovan\u00e9 protokoly cabal, dat, did, dweb, ethereum, hyper, ipfs, ipns a ssb, \u010do umo\u017e\u0148uje ur\u010dova\u0165 odkazy na prvky nez\u00e1visle od str\u00e1nky alebo br\u00e1ny, ktor\u00e1 poskytuje pr\u00edstup k zdroju.<\/li>\n<li> Do API Asynchronous Clipboard bola pridan\u00e1 podpora form\u00e1tu text\/html na kop\u00edrovanie a vkladanie HTML cez schr\u00e1nku (pri zapisovan\u00ed a \u010d\u00edtan\u00ed do schr\u00e1nky sa vykon\u00e1va \u010distenie nebezpe\u010dn\u00fdch HTML kon\u0161trukci\u00ed). Zmena, ktor\u00e1 napr\u00edklad umo\u017e\u0148uje organizova\u0165 v webov\u00fdch editoroch vkladanie a kop\u00edrovanie naform\u00e1tovan\u00e9ho textu s obr\u00e1zkami a odkazmi.<\/li>\n<li> Do WebRTC bola pridan\u00e1 mo\u017enos\u0165 pripoji\u0165 vlastn\u00e9 spracovate\u013esk\u00e9 funkcie, ktor\u00e9 sa volaj\u00fa v \u0161t\u00e1di\u00e1ch k\u00f3dovania alebo dek\u00f3dovania WebRTC MediaStreamTrack. Napr\u00edklad, t\u00fato mo\u017enos\u0165 je mo\u017en\u00e9 vyu\u017ei\u0165 na pr\u00eddanie podpory end-to-end \u0161ifrovania \u00fadajov pren\u00e1\u0161an\u00fdch cez medzi\u010dl\u00e1nkov\u00e9 servery.<br \/>\nV JavaScriptovom eng\u00edne V8 bola o 75 % zr\u00fdchlen\u00e1 implement\u00e1cia Number.prototype.toString. Do asynchr\u00f3nnych tried bolo pridan\u00e9 vlastnos\u0165 .name s pr\u00e1zdnou hodnotou. Met\u00f3da Atomics.wake, ktor\u00e1 bola predt\u00fdm premenovan\u00e1 na Atomics.notify na z\u00e1klade \u0161pecifik\u00e1cie ECMA-262, bola odstr\u00e1nen\u00e1. Bol otvoren\u00fd k\u00f3d n\u00e1stroja fuzzing-testovania JS-Fuzzer.<\/li>\n<li> Vo svojho \u010dasu vyu\u017e\u00edvan\u00fdch po\u010d\u00e1te\u010dnom (baseline) kompil\u00e1tore Liftoff pre WebAssembly bola pridan\u00e1 mo\u017enos\u0165 pou\u017e\u00edvania vektorov\u00fdch in\u0161trukci\u00ed SIMD na ur\u00fdchlenie v\u00fdpo\u010dtov. Pod\u013ea testov t\u00e1to optimaliz\u00e1cia ur\u00fdchlila v\u00fdkon niektor\u00fdch testov 2,8-kr\u00e1t. In\u00e1 optimaliz\u00e1cia zase v\u00fdrazne zr\u00fdchlila volanie importovan\u00fdch funkci\u00ed JavaScript z WebAssembly.<\/li>\n<li> N\u00e1stroje pre webov\u00fdch v\u00fdvoj\u00e1rov boli roz\u0161\u00edren\u00e9: Do panelu Media boli pridan\u00e9 inform\u00e1cie o prehr\u00e1va\u010doch pou\u017e\u00edvan\u00fdch na reprodukciu videa na str\u00e1nke, vr\u00e1tane \u00fadajov o udalostiach, logoch, hodnot\u00e1ch vlastnost\u00ed a parametroch dek\u00f3dovania sn\u00edmok (napr\u00edklad, je mo\u017en\u00e9 ur\u010di\u0165 pr\u00ed\u010diny straty sn\u00edmok a probl\u00e9my pri interakcii z JavaScriptu).<\/li>\n<li> V kontextovom menu panelu Elements bola pridan\u00e1 mo\u017enos\u0165 vytvori\u0165 screenshot vybran\u00e9ho prvku (napr\u00edklad je mo\u017en\u00e9 vytvori\u0165 screenshot obsahu alebo tabu\u013eky).<\/li>\n<li> V webovej konzole bola panel s upozorneniami na probl\u00e9my nahraden\u00e1 be\u017enou spr\u00e1vou, a probl\u00e9my so stranov\u00fdmi cookies s\u00fa predvolene skryt\u00e9 v z\u00e1lo\u017eke Issues a aktivuj\u00fa sa \u0161peci\u00e1lnym za\u010diarkavac\u00edm pol\u00ed\u010dkom.<\/li>\n<li> Na karte Rendering bola pridan\u00e1 tla\u010didlo \u201eDisable local fonts\u201c, ktor\u00e1 umo\u017e\u0148uje simulova\u0165 absenciu lok\u00e1lnych p\u00edsem, a na karte Sensors sa objavila mo\u017enos\u0165 simulova\u0165 neakt\u00edvnos\u0165 pou\u017e\u00edvate\u013ea (pre aplik\u00e1cie vyu\u017e\u00edvaj\u00face API Idle Detection).<\/li>\n<li> V paneli Application s\u00fa k dispoz\u00edcii podrobn\u00e9 inform\u00e1cie o ka\u017edom iframe, otvorenom okne a pop-up-och, vr\u00e1tane \u00fadajov o izol\u00e1cii Cross-Origin pomocou COEP a COOP.<\/li>\n<\/ul>\n<p>Za\u010dala sa v\u00fdmena implement\u00e1cie protokolu QUIC na variant vyv\u00edjan\u00fd \u0161pecifik\u00e1ciou IETF, namiesto Google variantu QUIC.<br \/>\nOkrem noviniek a opravy ch\u00fdb v novej verzii bolo odstr\u00e1nen\u00fdch 35 zranite\u013enost\u00ed. Mnoh\u00e9 z t\u00fdchto zranite\u013enost\u00ed boli odhalen\u00e9 v d\u00f4sledku automatizovan\u00e9ho testovania n\u00e1strojmi AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer a AFL. Jedna zranite\u013enos\u0165 (CVE-2020-15967, pr\u00edstup k uvo\u013enenej oblasti pam\u00e4te v k\u00f3de pre interakciu s Google Payments) je ozna\u010den\u00e1 ako kritick\u00e1, t.j. umo\u017e\u0148uje ob\u00eds\u0165 v\u0161etky \u00farovne ochrany prehliada\u010da a vykona\u0165 k\u00f3d v syst\u00e9me mimo sandboxov\u00e9ho prostredia. V r\u00e1mci programu odmien za objavovanie zranite\u013enost\u00ed pre aktu\u00e1lnu verziu spolo\u010dnos\u0165 Google vyplatila 27 odmien v celkovej sume 71500 dol\u00e1rov (jedna odmena 15000, tri odmeny 7500, p\u00e4\u0165 odmien 5000, dve 3000, jedna 200 a dve odmeny 500). Ve\u013ekos\u0165 13 odmien zatia\u013e nebola ur\u010den\u00e1.<\/p>\n<p><noindex><\/p>\n<p>Prevzat\u00e9 z <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53846\">Opennet.ru<\/a><\/p>\n<p><\/noindex><\/p>\n<p>Zdroj: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"http:\/\/www.linux.org.ru\/news\/google\/15935426\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u044b\u0448\u0435\u043b \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0440\u0435\u043b\u0438\u0437 Chrome 86 \u0438 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a Chromium. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 Chrome 86: \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0444\u043e\u0440\u043c \u0432\u0432\u043e\u0434\u0430 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445, \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u043e HTTPS, \u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e HTTP. \u0411\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 (http) \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u043e\u0439 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0430\u0440\u0445\u0438\u0432\u043e\u0432 (zip, iso \u0438 \u0442.\u043f.) \u0438 \u0432\u044b\u0432\u043e\u0434\u043e\u043c \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u043f\u0440\u0438 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 (docx, pdf \u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-96168","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u044b\u0448\u0435\u043b \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0440\u0435\u043b\u0438\u0437 Chrome 86 \u0438 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a Chromium.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/news\/chrome-86\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Chrome 86 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u044b\u0448\u0435\u043b \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0440\u0435\u043b\u0438\u0437 Chrome 86 \u0438 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a Chromium.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/news\/chrome-86\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-08T23:41:57+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-08T23:41:57+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Chrome 86 | ProHoster","description":"Vy\u0161iel \u010fal\u0161\u00ed release Chrome 86 a stabiln\u00e9 vydanie Chromium.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/chrome-86","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Chrome 86 | ProHoster","og:description":"\u0412\u044b\u0448\u0435\u043b \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0440\u0435\u043b\u0438\u0437 Chrome 86 \u0438 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a Chromium.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/chrome-86","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-08T23:41:57+00:00","article:modified_time":"2020-10-08T23:41:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"96168","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:51:00","updated":"2022-09-29 07:23:28","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/96168","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=96168"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/96168\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=96168"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=96168"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=96168"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}