Iyo API yeyakananga TCP uye UDP kutaurirana iri kugadzirwa yeChrome

Google akatanga kushandisa API itsva muChrome Zvigadziko Mbishi, iyo inobvumira mawebhu application kumisa yakananga network yekubatanidza uchishandisa iyo TCP uye UDP protocol. Muna 2015, W3C consortium yakatoedza kuenzanisa API "TCP uye UDP Socket", asi nhengo dzeboka rekushanda hadzina kusvika pakubvumirana uye kuvandudzwa kweAPI iyi kwakamiswa.

Kudiwa kwekuwedzera API itsva kunotsanangurwa nekupa kugona kushamwaridzana netiweki zvishandiso zvinoshandisa maprotocol emuno anomhanya pamusoro peTCP neUDP uye asingatsigire kutaurirana kuburikidza neHTTPS kana WebSockets. Zvinocherechedzwa kuti Raw Sockets API inozadzisa iyo yakaderera-level programming interfaces WebUSB, WebMIDI uye WebBluetooth yatovepo mubrowser, iyo inobvumira kudyidzana nemidziyo yemuno.

Kuti udzivise kukanganisa kwakashata pakuchengetedza, iyo Raw Sockets API inongobvumira mafoni etiweki anotangwa nemvumo yemushandisi uye anogumira kune rondedzero yevatambi vanotenderwa nemushandisi. Mushandisi anozofanirwa kunyatso simbisa yekutanga kubatanidza kuedza kwemugamuchiri mutsva. Uchishandisa mureza wakakosha, mushandisi anogona kudzima kuratidzwa kwekudzokororwa kwekuita zvikumbiro zvekusimbisa zvekubatanidza zvinodzokororwa kune imwecheteyo mugamuchiri. Kudzivirira DDoS kurwiswa, kusimba kwezvikumbiro kuburikidza neRaw Sockets kuchave kushoma, uye kutumira zvikumbiro zvinogoneka chete mushure mekubatana kwemushandisi nepeji. UDP mapaketi akagamuchirwa kubva kune vanogamuchira asina kutenderwa nemushandisi achafuratirwa uye haazosviki pawebhu application.

Kuitwa kwekutanga hakupi kugadzirwa kwezvigadziko zvekuteerera, asi mune ramangwana zvinogoneka kupa mafoni kuti agamuchire anouya kubatana kubva kune localhost kana runyorwa rwevanozivikanwa mauto. Zvakare kutaurwa kudiwa kwekudzivirira kubva pakurwiswa "DNS rebinding"(anorwisa anogona kushandura IP kero yezita rakatenderwa nemushandisi padanho reDNS uye kuwana mukana kune mamwe mauto). Izvo zvakarongwa kuvharidzira kupinda kune madomasi anogadzirisa kune 127.0.0.0/8 uye intranet network (kusvika kune localhost kunokurudzirwa kubvumidzwa chete kana iyo IP kero yaiswa pachena mufomu yekusimbisa).

Pakati penjodzi dzinogona kumuka pakushandisa API nyowani kurambwa kwayo nevagadziri vemamwe mabhurawuza, izvo zvinogona kutungamirira kumatambudziko ekuenderana. Vagadziri veMozilla Gecko uye WebKit injini vachiri hazvina kushanda chinzvimbo chayo pamusoro pekugona kuitwa kweRaw Sockets API, asi Mozilla yakanga yambokurudzira chirongwa cheFirefox OS (B2G) API yakafanana. Kana yakabvumidzwa padanho rekutanga, iyo Raw Sockets API inorongwa kuti ishandiswe paChrome OS, uye yozongopihwa kune vashandisi veChrome pane mamwe masisitimu.

Vagadziri vewebhu zvakanaka yakapindura kuAPI itsva uye yakaratidza mazano akawanda matsva pamusoro pekushandiswa kwayo munzvimbo idzo XMLHttpRequest, WebSocket uye WebRTC APIs haina kukwana (kubva pakugadzira vatengi vebrowser yeSSH, RDP, IMAP, SMTP, IRC uye mapuroteni ekudhinda kusvika pakugadzira akaparadzirwa P2P masisitimu ane DHT (Distributed Hash Table), IPFS tsigiro uye kupindirana nemamwe maprotocol eIoT zvishandiso).

Source: opennet.ru