The NoScript 11.2.18 browser add-on yakasunungurwa, yakagadzirirwa kuvhara JavaScript code ine ngozi uye isingadiwi, pamwe chete nemhando dzakasiyana-siyana dzekurwisa (XSS, DNS Rebinding, CSRF, Clickjacking). Shanduro itsva iyi inogadzirisa nyaya yakakonzerwa neshanduko mukubata kwefaira:// URLs muinjini yeChromium. Dambudziko rakakonzera kusakwanisa kuzarura nzvimbo dzakawanda (Gmail, Facebook, etc.) mushure mekugadzirisa kuwedzera kune shanduro 11.2.16 mune zvitsva zvitsva zvemabhurawuza achishandisa Chromium injini (Chrome, Brave, Vivaldi).
Dambudziko rakakonzerwa nenyaya yekuti mushanduro itsva dzeChromium, kuwana ma-add-ons ku "file:///" URL kwairambidzwa nekusingaperi. Dambudziko harina kucherechedzwa nekuti rakangooneka pakuisa NoScript kubva kuChrome Store yekuwedzera-katabhu. Pakuisa zip archive kubva kuGitHub kuburikidza ne "Road unpacked" menyu (chrome://extensions> Developer mode), dambudziko harioneki, sezvo kuwana iyo faira:/// URL haina kuvharwa mukuvandudza mode. A workaround yedambudziko ndeyekugonesa iyo "Bvumira kupinda kune faira URLs" kuseta mune yekuwedzera-pazvirongwa.
Mamiriro acho akawedzerwa nenyaya yekuti mushure mekuisa NoScript 11.2.16 mu Chrome Web Store dhairekitori, munyori akaedza kukanzura kuburitswa, izvo zvakakonzera kutsakatika kwese peji reprojekiti. Nekudaro, kwenguva yakati vashandisi vaisakwanisa kudzosera kumashure kune yakapfuura vhezheni uye vakamanikidzwa kudzima iyo yekuwedzera. Iyo Chrome Web Store peji ikozvino yadzoreredzwa uye nyaya yakagadziriswa mukuburitswa 11.2.18. MuKatalog yeChitoro cheChrome Webhu, kuitira kudzivirira kunonoka kuongorora kodhi yeshanduro itsva, zvakasarudzwa kuti zvidzoke kumamiriro ekare uye kuisa kuburitswa 11.2.17, zvakafanana neyakaedzwa kare vhezheni 11.2.11.
Source: opennet.ru