Chrome 86

Kuburitswa kunotevera kweChrome 86 uye kuburitswa kwakagadzikana kweChromium kwaburitswa.

Kuchinja kukuru muChrome 86:

• dziviriro kubva pakutumira zvisina kuchengetedzeka kwemafomu ekuisa pamapeji akaiswa pamusoro peHTTPS asi achitumira data pamusoro peHTTP.
• Kuvharisa kudhawunirodha kusiri kuchengetedzwa (http) kwemafaira anoteedzerwa kunowedzerwa nekuvharira kudhawunirodha zvisina kuchengetedzeka kwezvinyorwa (zip, iso, nezvimwewo) uye kuratidza yambiro yekudhawunirodha zvisina kuchengetedzeka kwemagwaro (docx, pdf, nezvimwewo). Document blocking uye yambiro yemifananidzo, zvinyorwa, uye midhiya mafaera zvinotarisirwa mukuburitswa kunotevera. Kuvharira kunoitwa nekuti kurodha mafaera pasina encryption kunogona kushandiswa kuita zvakaipa nekutsiva zvirimo panguva yekurwiswa kweMITM.
• Iyo yakasarudzika menyu inoratidza iyo "Gara ratidza yakazara URL" sarudzo, yaimboda kushandura marongero pane nezve: mireza peji kuti igone. Iyo yakazara URL inogona zvakare kutariswa nekudzvanya-kaviri pane kero bar. Ngatikuyeuchidzei kuti kutanga neChrome 76, nekukasira kero yakatanga kuratidzwa pasina protocol uye www subdomain. MuChrome 79, marongero ekudzorera maitiro ekare akabviswa, asi mushure mekusagutsikana nemushandisi, mureza mutsva wekuyedza wakawedzerwa muChrome 83 iyo inowedzera sarudzo kumenu yemamiriro ekudzima kuhwanda uye kuratidza yakazara URL mumamiriro ese.
  Kune diki muzana yevashandisi, kuyedza kwakatangwa kuratidza chete dura mubhawa rekero nekukasira, pasina nzira zvinhu uye query paramita. Somuenzaniso, pane "https://example.com/secure-google-sign-in/" "example.com" icharatidzwa. Iyo yakatsanangurwa modhi inotarisirwa kuunzwa kune vese vashandisi mune imwe yeinotevera kuburitswa. Kudzima maitiro aya, unogona kushandisa iyo "Gara uchiratidzira URL yakazara" sarudzo, uye kuona iyo URL yese, unogona kudzvanya pakabhati kero. Chinangwa cheshanduko iyi chishuwo chekuchengetedza vashandisi kubva kuhutsotsi hunobata maparamendi muURL - vanorwisa vanotora mukana wekusangwarira kwevashandisi kugadzira chitarisiko chekuvhura imwe saiti uye kuita zviito zvehutsotsi (kana kutsiva kwakadaro kuri pachena kune mushandisi ane hunyanzvi. , vanhu vasina ruzivo vanowira nyore nyore nokuda kwekunyengera kwakadaro).
• Chirongwa chekubvisa rutsigiro rweFTP chamutsiridzwa. MuChrome 86, FTP inovharwa nekusarudzika kune vangangoita 1% yevashandisi, uye muChrome 87 huwandu hwekuremara huchawedzerwa kusvika pa50%, asi rutsigiro runogona kudzoserwa uchishandisa "--enable-ftp" kana "- -enable-features=FtpProtocol" mureza. MuChrome 88, rutsigiro rweFTP rucharemara zvachose.
• Mushanduro yeAndroid, yakafanana neshanduro yedesktop masisitimu, maneja wepassword anoisa cheki yeakachengetwa logins nemapassword achipesana nedhatabhesi yemaakaundi akakanganiswa, achiratidza yambiro kana matambudziko aonekwa kana kuyedza kushandisa mapassword mashoma. Cheki inoitwa ichipokana nedhatabhesi inofukidza anopfuura mabhiriyoni mana akakanganiswa maakaundi akaonekwa mune akaburitswa mushandisi dhatabhesi. Kuti uchengetedze kuvanzika, iyo hash prefix inosimbiswa parutivi rwemushandisi, uye mapassword pachawo uye akazara hashes haafambiswe kunze.
• Bhatani re "Chengetedza Cheki" uye iyo yakakwidziridzwa nzira yekudzivirira kubva kune ine njodzi masaiti (Yakawedzerwa Safe Browsing) yakaendeswa kune iyo Android vhezheni. Bhatani re "Safety cheki" rinoratidza pfupiso yezvingangoitika zvekuchengetedza, sekushandiswa kwemapassword akakanganisika, mamiriro ekutarisa mawebhusaiti ane hutsinye (Safe Browsing), kuvapo kwezvigadziriso zvisina kuvhurwa, uye kuzivikanwa kweawedzero yakaipa. Yepamberi yekudzivirira modhi inomisikidza mamwe macheki kudzivirira kubva mukubira, kuita zvakaipa uye kumwe kutyisidzira paWebhu, uye zvakare inosanganisira imwe dziviriro yeakaundi yako yeGoogle neGoogle masevhisi (Gmail, Drive, nezvimwewo). Kana mune yakajairwa Safe Browsing mode macheki anoitwa munharaunda uchishandisa dhatabhesi nguva nenguva inoiswa pane yevatengi sisitimu, ipapo muEnhanced Safe Browsing ruzivo nezvemapeji uye kudhawunirodha munguva chaiyo inotumirwa kuti iongororwe kudivi reGoogle, iyo inokutendera iwe kukurumidza kupindura kutyisidzira nekukurumidza mushure mekunge vazivikanwa, pasina kumirira kusvika rondedzero yemuno yagadziridzwa.
• Yakawedzerwa rutsigiro rwechiratidzo chefaira ".well-known/change-password", iyo varidzi vesaiti vanogona kutsanangura kero yefomu rewebhu rekuchinja password. Kana magwaro emushandisi akakanganiswa, Chrome zvino ichakurumidza kusimudzira mushandisi nefomu rekuchinja password zvichienderana neruzivo rwuri mufaira iri.
• Nyevero itsva ye "Safety Tip" yaitwa, inoratidzwa pakuvhura nzvimbo dzine dhomeini yakafanana neimwe saiti uye heuristics inoratidza kuti pane mukana wakakura we spoofing (semuenzaniso, goog0le.com inovhurwa pachinzvimbo chegoogle.com).

  * Tsigiro yeBack-forward cache yaitwa, ichipa kufamba nekukurumidza kana uchishandisa "Kumashure" uye "Pamberi" mabhatani kana pakufamba nemapeji aimboonekwa esaiti iripo. Iyo cache inogoneswa uchishandisa iyo chrome://flags/#back-forward-cache setting.

• Kugadzirisa mashandisirwo eCPU zviwanikwa zvekunze-kwe-scope windows. Chrome inotarisa kana hwindo rebrowser rakaputirwa nemamwe mahwindo uye inodzivirira kudhirowa pixels munzvimbo dzinopindirana. Iyi optimization yakagoneswa kune diki muzana yevashandisi muChrome 84 uye 85 uye ikozvino yavepo kwese kwese. Zvichienzaniswa nezvakaburitswa zvakaburitswa, kusapindirana nemasisitimu ekuonana kwakaita kuti mapeji machena asina kujeka aoneke akagadziriswa.
• Kuwedzera kwekugadzirisa zviwanikwa zvema tabhu ekumashure. Matebu akadaro haachakwanise kushandisa zvinopfuura 1% zveCPU zviwanikwa uye anogona kuitwa kwete kanopfuura kamwe paminiti. Mushure memaminitsi mashanu ekumashure, ma tabo anoomeswa nechando, kunze kwematabo ari kutamba multimedia zvemukati kana kurekodha.
• Basa rakatangazve pakubatanidza Mushandisi-Mumiriri weHTTP musoro. Mushanduro itsva, tsigiro yeMushandisi-Agent Client Hints michina, yakagadziridzwa sechinzvimbo cheMushandisi-Mumiriri, inoitirwa vese vashandisi. Iyo nzira nyowani inosanganisira kusarudza kudzorera data nezve chaiyo browser uye system paramita (vhezheni, chikuva, nezvimwewo) chete mushure mekukumbira neserver uye kupa vashandisi mukana wekusarudza kupa ruzivo rwakadaro kune varidzi vesaiti. Paunenge uchishandisa Mazano eMutengi-Mutengi, chiziviso hachifambiswe nekusarudzika pasina chikumbiro chakajeka, izvo zvinoita kuti kusazivikanwa kusingaite (nekusarudzika, zita rebhurawuza chete rinoratidzwa).
  Chiratidzo chekuvapo kwekuvandudza uye kukosha kwekutangazve bhurawuza kuti uiise yakashandurwa. Panzvimbo pemuseve weruvara, "Kugadziridza" ikozvino yaonekwa muakaundi avatar ndima.
• Basa rakaitwa kushandura browser kuti ishandise inclusive terminology. Mumazita emitemo, mazwi ekuti "whitelist" uye "blacklist" akatsiviwa ne "allowlist" uye "blocklist" (akatowedzerwa marongero acharamba achishanda, asi anozoratidza yambiro nezvekudzikiswa). Mune kodhi nemazita emafaira, mareferensi e "blacklist" akatsiviwa ne "blocklist". Manongedzo anoonekwa emushandisi e "blacklist" uye "whitelist" akatsiviwa pakutanga kwa2019.
  Yakawedzera hunyanzvi hwekuyedza kugadzirisa mapassword akachengetwa, akabatidzwa uchishandisa "chrome://flags/#edit-passwords-in-settings" mureza.
• Iyo Native File System API yakaendeswa kuchikamu cheiyo yakagadzikana uye inowanikwa pachena API, ichikubvumidza iwe kugadzira webhu maapplication anodyidzana nemafaira ari munharaunda faira system. Semuenzaniso, iyo API nyowani inogona kunge iri kudiwa mubrowser-based integrated development environments, zvinyorwa, mufananidzo uye vhidhiyo edhita. Kuti ukwanise kunyora zvakananga uye kuverenga mafaera kana kushandisa dialog kuvhura uye kuchengetedza mafaera, pamwe nekufamba kuburikidza nemukati medhairekitori, application inokumbira mushandisi kusimbiswa kwakakosha.
• Yakawedzera CSS selector ":focus-inooneka", iyo inoshandisa heuristics yakafanana inoshandiswa nebrowser pakusarudza kana kuratidza chinongedzo chekuchinja (kana uchifambisa tarisa kune bhatani uchishandisa mapfupi ekhibhodi, chiratidzo chinobuda, asi kana uchidzvanya negonzo. , hazviiti). Iyo yaimbove iripo CSS selector ":focus" inogara ichiratidza kutarisa. Uye zvakare, iyo "Quick Focus Highlight" sarudzo yakawedzerwa kune zvigadziriso, kana yagoneswa, imwe yekuwedzera yekutarisa chiratidzo icharatidzwa padivi pezvinhu zvinoshanda, izvo zvinoramba zvichionekwa kunyangwe zvimiro zvechimiro chekutarisa kwekutarisa zvakavharwa pane peji kuburikidza. CSS.
• MaAPI matsva akati wandei akawedzerwa kune Origin Miyedzo modhi (yekuyedza maficha anoda kupatsanurwa activation). Origin Trial inoreva kugona kushanda neiyo API yakatarwa kubva kune yakatorwa kubva kune localhost kana 127.0.0.1, kana mushure mekunyoresa uye kugamuchira yakakosha tokeni iyo inoshanda kwenguva shoma kune yakatarwa saiti.
• WebHID API yekuwana yakaderera-level yekuwana kuHID zvishandiso (Human interface zvishandiso, kiyibhodhi, mbeva, gamepads, touchpads), iyo inokutendera iwe kuita pfungwa yekushanda neHID mudziyo muJavaScript kuronga basa neasingawanzo HID zvishandiso pasina kuvepo kwe. chaiwo vatyairi muhurongwa. Chekutanga pane zvese, iyo API nyowani yakanangana nekupa rutsigiro rwemagamepads.
• Screen Information API, inowedzera iyo Window Placement API kutsigira akawanda-screen zvigadziriso. Kusiyana nehwindo.screen, iyo API nyowani inokutendera iwe kuti ushandise kuiswa kwehwindo mune yakazara skrini nzvimbo yeakawanda-monitor masisitimu, pasina kuganhurirwa kune yazvino skrini.
• Meta tag bhatiri-savings, iyo saiti inogona kuzivisa bhurawuza nezve kukosha kwekumisikidza modes kudzikisa simba rekushandisa uye optimize CPU mutoro.
• COOP Reporting API yekutaura zvingangotyorwa zveCross-Origin-Embedder-Policy (COEP) uye Cross-Origin-Opener-Policy (COOP) nzira dzekuzviparadzanisa nevamwe, pasina kushandisa zvirambidzo chaizvo.
• Iyo Credential Management API inopa mhando nyowani yezvitupa, PaymentCredential, iyo inopa humwe humbowo hwekubhadhara kuri kuitwa. Bato rinovimbika, rakadai sebhangi, rinokwanisa kugadzira kiyi yeruzhinji, PublicKeyCredential, iyo inogona kukumbirwa nemutengesi kuti awedzere kubhadhara kwakachengeteka.
• Iyo PointerEvents API yekuona kurereka kwechinyoreso* yakawedzera tsigiro yemakona ekusimudza (iyo kona iri pakati pechinyoreso nechidzitiro) uye azimuth (iyo kona iri pakati pe X axis uye fungidziro yechinyoreso pachiratidziro), pachinzvimbo cheiyo. TiltX uye TiltY angles (makona ari pakati pendege kubva pachinyoreso uye imwe yemasanhu uye ndege kubva kuY uye Z axes). Zvakare yakawedzera kushandura mabasa pakati pealtitude/azimuth uye TiltX/TiltY.
• Yakachinja encoding yenzvimbo muma URL paiverengerwa mumaprotocol handlers - the navigator.registerProtocolHandler() nzira yava kutsiva nzvimbo ne "%20" pachinzvimbo che "+", iyo inobatanidza maitiro nemamwe mabhurawuza akaita seFirefox.
• Pseudo-element "::marker" yawedzerwa kuCSS, ichikutendera kuti ugadzirise ruvara, saizi, chimiro uye rudzi rwenhamba nemadots ezvinyorwa mumabhuroko. Uye .
• Yakawedzera tsigiro yegwaro-Policy HTTP musoro, iyo inokutendera iwe kuti uise mitemo yekuwana magwaro, yakafanana neyesandbox yekuzviparadzanisa nzira yeiframes, asi yakawanda yepasirese. Semuenzaniso, kuburikidza neGwaro-Policy unogona kudzikamisa kushandiswa kwemifananidzo yakaderera, kudzima inononoka JavaScript APIs, gadzirisa mitemo yekurodha iframes, mifananidzo uye zvinyorwa, kudzikisira iyo yakazara gwaro saizi uye traffic, inorambidza nzira dzinotungamira kudhirowa peji, uye dzima basa reMupumburu-Kune-Chinyorwa.
• To element yakawedzera tsigiro ye 'inline-grid', 'grid', 'inline-flex' uye 'flex' paramita akaiswa kuburikidza ne'kuratidza' CSS chivakwa.
• Yakawedzerwa ParentNode.replaceChildren() nzira yekutsiva vana vese venodi yemubereki neimwe DOM node. Kare, waigona kushandisa musanganiswa wenode.removeChild() ne node.append() kana node.innerHTML uye node.append() kutsiva node.
• Huwandu hwezvirongwa zveURL zvinogona kudhindwa uchishandisa registerProtocolHandler() hwawedzerwa. Rondedzero yezvirongwa inosanganisira decentralized protocols cabal, dat, did, dweb, ethereum, hyper, ipfs, ipns uye ssb, iyo inokutendera iwe kutsanangura zvinongedzo kune zvinhu zvisinei nenzvimbo kana gedhi rinopa mukana kune iyo sosi.
• Yakawedzerwa rutsigiro rwemavara/html fomati kuAsynchronous Clipboard API yekukopa uye kunamira HTML kuburikidza ne clipboard (ine njodzi HTML inovaka inocheneswa kana uchinyora uye kuverenga kune clipboard). Shanduko, semuenzaniso, inobvumidza iwe kuronga kuisirwa uye kukopa zvinyorwa zvakafometwa nemifananidzo uye zvinongedzo muwebhu edhita.
• WebRTC yakawedzera kugona kubatanidza yayo yekubata data, inodaidzwa paiyo encoding kana decoding matanho eWebRTC MediaStreamTrack. Semuenzaniso, kugona uku kunogona kushandiswa kuwedzera rutsigiro rwekupedzisira-kusvika-kumagumo encryption yedata inofambiswa kuburikidza nepakati maseva.
  Muinjini yeV8 JavaScript, kushandiswa kweNhamba.prototype.toString kwakawedzerwa ne75%. Yakawedzerwa .name property kumakirasi asynchronous ane value isina chinhu. Nzira yeAtomics.wake yakabviswa, iyo pane imwe nguva yakatumidzwa zita rokuti Atomics.zivisa kuti ienderane ne ECMA-262 tsanangudzo. Iyo kodhi yeiyo fuzzing yekuyedza chishandiso JS-Fuzzer yakavhurika.
• Iyo Liftoff baseline compiler yeWebAssembly yakaburitswa mukuburitswa kwekupedzisira inosanganisira kugona kushandisa SIMD vector mirairo kuti ikurumidze kuverenga. Tichitarisa nemiedzo, optimization yakaita kuti zvikwanise kumhanyisa mimwe bvunzo ne2.8 nguva. Imwe optimization yakaita kuti ikurumidze kudaidza kunze kwenyika JavaScript mabasa kubva kuWebAssembly.
• Zvishandiso zvevagadziri vewebhu zvakawedzerwa: Iyo Media pani yakawedzera ruzivo nezvevatambi vakashandiswa kutamba vhidhiyo pane peji, kusanganisira chiitiko data, matanda, kukosha kwezvivakwa uye furemu decoding paramita (semuenzaniso, unogona kuona zvikonzero zvefuremu. kurasikirwa uye matambudziko ekudyidzana kubva kuJavaScript).
• Mune menyu yemamiriro eiyo Elements pani, kugona kugadzira zvidzitiro zvechinhu chakasarudzwa kwakawedzerwa (semuenzaniso, unogona kugadzira skrini yetafura yezviri mukati kana tafura).
• Muwebhu console, dambudziko rekunyevera pani rakatsiviwa nemeseji yenguva dzose, uye matambudziko ane wechitatu-bato Cookies akavanzwa nekusarudzika muIssues tab uye anogoneswa neakakosha bhokisi rekutarisa.
• MuRendering tab, bhatani re "Dzima mafonti emunharaunda" rawedzerwa, iro rinokutendera kuti utevedzere kusavapo kwemafonti emunharaunda, uye muSensors tebhu iwe unogona ikozvino kutevedzera kusaita kwemushandisi (yekushandisa uchishandisa Idle Detection API).
• Iyo Chishandiso pani inopa ruzivo rwakadzama nezve imwe neimwe iframe, yakavhurika hwindo, uye pop-up, kusanganisira ruzivo nezve Cross-Origin yekuzviparadzanisa nevamwe uchishandisa COEP uye COOP.

Kuitwa kweQuIC protocol kwatanga kutsiviwa neshanduro yakagadziridzwa mune yakatarwa yeIETF, pachinzvimbo cheGoogle vhezheni yeQUIC.
Pamusoro pehunyanzvi uye kugadzirisa kwebug, iyo nyowani vhezheni inobvisa 35 kusagadzikana. Mazhinji ekusagadzikana akaonekwa semhedzisiro yekuongorora otomatiki uchishandisa KeroSanitizer, MemorySanitizer, Kudzora Flow Kutendeseka, LibFuzzer uye AFL maturusi. Kusagadzikana kumwe (CVE-2020-15967, kuwana yakasunungurwa ndangariro mukodhi yekudyidzana neGoogle Payments) inomisikidzwa yakaoma, i.e. inokutendera kuti upfuure ese mazinga ebrowser kuchengetedza uye kuita kodhi pane system kunze kwesandbox nharaunda. Sechikamu chechirongwa chekubhadhara mibairo yemari yekuwana kusasimba kwekuburitswa kwazvino, Google yakabhadhara mibairo makumi maviri nenomwe inokosha $27 (mubairo mumwe chete wemadhora zviuru gumi nezvishanu, mibairo mitatu yemadhora zviuru zvishanu, mibairo mishanu yemadhora zviuru zvishanu, mibairo yemadhora zviuru zvitatu, mubairo mumwe wemadhora mazana maviri, uye mibairo miviri yemadhora mazana mashanu). Saizi yegumi nematatu mibairo haisati yazivikanwa.

Yakatorwa kubva Opennet.ru

Source: linux.org.ru