Google yakazarura kusunungurwa kwewebhu Chrome 102. Panguva imwecheteyo, kusunungurwa kwakagadzikana kweprojekti yeChromium yakasununguka, iyo inoshanda sehwaro hweChrome, inowanikwa. Iyo Chrome browser inosiyana neChromium mukushandiswa kweGoogle logos, kuvapo kwehurongwa hwekutumira zviziviso kana yaparara, ma module ekutamba kopi-yakachengetedzwa vhidhiyo yemukati (DRM), sisitimu yekuisa otomatiki zvigadziriso, zvichigonesa zvachose Sandbox kuparadzaniswa. , ichipa makiyi kuGoogle API uye kutumira RLZ- paunenge uchitsvaga. Kune avo vanoda nguva yakawanda yekuvandudza, Bazi Rakawedzerwa Rakagadzikana rinotsigirwa zvakasiyana, richiteverwa nemavhiki masere. Kuburitswa kunotevera kweChrome 8 kwakarongerwa June 103st.
Kuchinja kukuru muChrome 102:
- Kuvhara kushandiswa kwekusagadzikana kunokonzerwa nekuwana yakatosunungurwa ndangariro mabhuroki (kushandisa-mushure-yemahara), panzvimbo yeakajairwa anonongedzera, mhando yeMiraclePtr (raw_ptr) yakatanga kushandiswa. MiraclePtr inopa inosunga pamusoro peinongedza iyo inoita yekuwedzera cheki pakuwana kune yakasunungurwa nzvimbo dzendangariro uye tsaona kana mapindiro akadaro aonekwa. Mhedzisiro yenzira itsva yekudzivirira pakuita uye kushandiswa kwekuyeuka kunoongororwa sechinhu chisina basa. Iyo MiraclePtr nzira haishande mune ese maitiro, kunyanya haishandiswe mukupa maitiro, asi inogona kuvandudza zvakanyanya chengetedzo. Semuenzaniso, mukuburitswa kwazvino, kunze kwekusagadzikana kwe32 kwakagadziriswa, gumi nemaviri akakonzerwa nekushandisa-mushure-kwemahara matambudziko.
- Magadzirirwo eiyo interface ine ruzivo nezve kurodha yakashandurwa. Panzvimbo peiyo yepasi pasi nedata rekurodha kufambira mberi, chiratidzo chitsva chakawedzerwa kune pani ine kero bar; kana iwe ukadzvanya pairi, kufambira mberi kwekurodha mafaera uye nhoroondo ine runyoro rwemafaira akatorwa kare anoratidzwa. Kusiyana nepaneru yepazasi, bhatani rinogara richiratidzwa pane pani uye rinokutendera iwe kuti uwane nekukurumidza nhoroondo yako yekurodha. Iyo nyowani interface parizvino inopihwa nekusarudzika kune vamwe vashandisi uye ichawedzerwa kune vese kana pasina matambudziko. Kudzosa chimiro chekare kana kugonesa imwe nyowani, iyo "chrome://flags#download-bubble" inopihwa.
- Paunenge uchitsvaga mifananidzo kuburikidza nemenu yemukati ("Tsvaga mufananidzo neGoogle Lens" kana "Tsvaga kuburikidza neGoogle Lens"), mibairo yave kuratidzwa kwete pane rimwe peji, asi mudivi repadivi pezviri papeji yekutanga (mu. hwindo rimwe iwe unogona kuona panguva imwe chete zvese zviri mukati peji uye uye mhedzisiro yekuwana injini yekutsvaga).
- Muchikamu che "Chakavanzika uye Chengetedzo" chikamu chezvirongwa, chikamu che "Chakavanzika Gwaro" chawedzerwa, icho chinopa tarisiro yakajairika yezvirongwa zvikuru zvinokanganisa kuvanzika netsananguro dzakadzama dzemabatiro ega ega. Semuenzaniso, muchikamu iwe unogona kutsanangura mutemo wekutumira data kuGoogle masevhisi, maneja kuwiriranisa, Cookie kugadzirisa uye kuchengetedza nhoroondo. Iro basa rinopihwa kune vamwe vashandisi; kuti riite kuti riite, unogona kushandisa iyo "chrome: // mireza # kuvanzika-guidhi" kuseta.
- Kuumbwa kwenhoroondo yekutsvaga uye mapeji akatariswa anopihwa. Paunenge uchiedza kutsvaga zvakare, chinongedzo chekuti "Resume your journey" chinoratidzwa mubhawa rekero, zvichikutendera kuti uenderere mberi nekutsvaga kubva kwawakavhiringidzwa kekupedzisira.
- Iyo Chrome Web Store inopa "Extensions Starter Kit" peji ine yekutanga sarudzo yeanokurudzirwa ekuwedzera.
- Mune bvunzo modhi, kutumira CORS (Cross-Origin Resource Kugovera) chikumbiro chemvumo kune iyo huru saiti server ine musoro "Access-Control-Request-Private-Network: true" inogoneswa kana peji ikawana sosi pane yemukati network ( 192.168.xx , 10.xxx, 172.16.xx) kana kuti localhost (128.xxx). Paunenge uchisimbisa kushanda mukupindura chikumbiro ichi, sevha inofanirwa kudzosera iyo "Kupinda-Kudzora-Bvumira-Yakavanzika-Network: chokwadi" musoro. MuChrome vhezheni 102, mhedzisiro yekusimbisa haisati yakanganisa kugadziriswa kwechikumbiro - kana pasina humbowo, yambiro inoratidzwa muwebhu console, asi iyo subresource chikumbiro pachayo haina kuvharwa. Kugonesa kuvharira pasina simbisiro kubva pasevha hazvitarisirwe kusvika Chrome 105 yaburitswa. Kuti ugone kuvharika mune zvakamboburitswa, unogona kugonesa kuseta "chrome://flags/#private-network-access-respect-preflight- mhinduro".
Kuongororwa kwechiremera nesevha kwakaunzwa kusimbisa dziviriro kubva pakurwiswa zvine chekuita nekuwana zviwanikwa panetiweki yemunharaunda kana pakombuta yemushandisi (localhost) kubva kune zvinyorwa zvakaiswa pakuvhura saiti. Zvikumbiro zvakadaro zvinoshandiswa nevanorwisa kuita CSRF kurwisa marouters, nzvimbo dzekupinda, maprinta, emakambani mawebhusaiti uye zvimwe zvishandiso nemasevhisi anobvuma zvikumbiro kubva kunetiweki yemuno chete. Kuti udzivirire kubva pakurwiswa kwakadaro, kana chero zviwanikwa zviwanikwa panetiweki yemukati, browser inotumira chikumbiro chakajeka chemvumo yekurodha izvi zvidiki-zviwanikwa.
- Kana uchivhura zvinongedzo mune incognito modhi kuburikidza nemenu yemukati, mamwe ma paramita anobata kuvanzika anobviswa otomatiki kubva kuURL.
- Iyo yekuvandudza nzira yekuendesa yeWindows uye Android yakashandurwa. Kuti uenzanise zvizere maitiro ezvitsva uye zvekare zvinoburitswa, akawanda anovaka eiyo vhezheni itsva ave kugadzirirwa kurodha.
- Network segmentation tekinoroji yakagadziriswa kuchengetedza nzira dzekutevera mafambiro evashandisi pakati pesaiti zvichibva pakuchengetedza zviziviso munzvimbo dzisina kuitirwa kuchengetedza zvachose ruzivo ("Supercookies"). Nekuti zviwanikwa zvakachengetwa zvakachengetwa munzvimbo yakajairika yezita, zvisinei nenzvimbo inotangira, imwe saiti inogona kuona kuti imwe saiti iri kurodha zviwanikwa nekutarisa kuti iyo sosi iri mu cache. Kudzivirirwa kwakavakirwa pakushandiswa kwetiweki segmentation (Network Partitioning), musimboti wekuwedzera kune yakagovaniswa cache yakawedzera kusungirirwa kwemarekodhi kune iyo dura kubva iyo iyo huru peji inovhurwa, iyo inomisa iyo cache yekuvhara yekufamba kwekutevera zvinyorwa chete. kune yazvino saiti (script kubva kune iframe haizokwanise kutarisa kana sosi yakatorwa kubva kune imwe saiti). State sharing inovhara network connections (HTTP/1, HTTP/2, HTTP/3, websocket), DNS cache, ALPN/HTTP2, TLS/HTTP3 data, configuration, downloads, uye Tarisira-CT header information.
- Kune yakamisikidzwa yakamira-yega yewebhu maapplication (PWA, Progressive Web App), zvinokwanisika kushandura dhizaini yenzvimbo yezita rehwindo uchishandisa Window Controls Overlay zvikamu, izvo zvinowedzera skrini yewebhu application kuhwindo rese. Chishandiso chewebhu chinogona kudzora kupa uye kupinza kugadzirisa kwehwindo rese, kunze kwechivharo chekuvharira chine mabhatani akajairika ekudzora hwindo (vhara, dzikisa, wedzera), kupa iyo webhu application chimiro chenguva dzose desktop application.
- Mune fomu autofill system, rutsigiro rwakawedzerwa rwekugadzira nhamba dzekadhi rechikwereti muminda ine ruzivo rwekubhadhara kwezvinhu muzvitoro zvepamhepo. Kushandisa kadhi chaiyo, iyo nhamba inogadzirwa pakubhadhara kwega kwega, inokubvumira kuti usaendesa data pamusoro pekadhi rechikwereti chairo, asi inoda kupiwa kwebasa rinodiwa nebhangi. Iyo ficha parizvino inowanikwa kune vatengi vekubhangi reUS. Kuti udzore kubatanidzwa kwebasa racho, iyo "chrome://flags/#autofill-enable-virtual-card" inorongwa.
- Iyo "Capture Handle" meshini inoshandiswa neyakagadzika, ichikutendera iwe kuendesa ruzivo kune maapplication anotora vhidhiyo. Iyo API inoita kuti zvikwanisike kuronga kupindirana pakati pezvikumbiro zvine zvinyorwa zvakarekodhwa uye zvikumbiro zvinoita kurekodha. Semuyenzaniso, vhidhiyo yemusangano musangano iri kutora vhidhiyo kutepfenyura mharidzo inogona kudzoreredza ruzivo nezvezviratidziro zvekuratidzira uye kuaratidza pahwindo revhidhiyo.
- Tsigiro yemitemo yekufungidzira inogoneswa nekusarudzika, ichipa inochinjika syntax yekuona kana data inoenderana-yakabatana inogona kutakurwa zvine mutsindo mushandisi asati adzvanya pane chinongedzo.
- Iyo michina yekurongedza zviwanikwa mumapakeji muWebhu Bundle fomati yakagadzikana, ichibvumira kuwedzera kugona kwekurodha nhamba huru yemafaira anoperekedza (CSS masitayipi, JavaScript, mifananidzo, iframes). Kusiyana nemapakeji ari muWebpack fomati, iyo Webhu Bundle fomati ine zvinotevera zvakanakira: haisi iyo pasuru pachayo inochengetwa muHTTP cache, asi chikamu chechikamu; kuunganidzwa uye kuitwa kweJavaScript kunotanga pasina kumirira kuti pasuru inyatso kurodha; Inotenderwa kusanganisa zvimwe zviwanikwa zvakaita seCSS nemifananidzo, iyo muwebpack yaizofanirwa kuvharirwa muchimiro cheJavaScript tambo.
- Zvinogoneka kutsanangura PWA application semubati wemamwe marudzi eMIME uye mafaera ekuwedzera. Mushure mekutsanangura chinosunga kuburikidza nefaira_handlers ndima mumanifesiti, chishandiso chinogashira chiitiko chakakosha apo mushandisi anoyedza kuvhura faira rakabatana nechishandiso.
- Yakawedzera chimiro chitsva chine inert chinokutendera iwe kumaka chikamu chemuti weDOM se "chisina basa". Kune DOM node mune ino mamiriro, kusarudzwa kwemavara uye pointer hover zvibatiso zvakadzimwa, i.e. Iyo pointer-zviitiko uye mushandisi-sarudza CSS zvivakwa zvinogara zvakagadzirirwa kuti 'hapana'. Kana node yaigona kugadziridzwa, saka mune inert modhi inova isingagoneki.
- Yakawedzera Navigation API, iyo inobvumira mawebhu maapplication kuti atore hwindo rekutenderera mashandiro, kutanga kufamba, uye kuongorora nhoroondo yezviito nechishandiso. Iyo API inopa imwe nzira kune iyo hwindo.history uye windows.location zvivakwa, zvakagadziridzwa kune imwechete-peji web applications.
- Mureza mutsva, "kusvika-wawanikwa", wakatsanangurwa kune "chakavanzika" hunhu, izvo zvinoita kuti chinhu chitsvage pane peji uye chitenderere nemavara maski. Semuenzaniso, unogona kuwedzera mavara akavanzika kune peji, izvo zviri mukati zvichawanikwa mukutsvaga kwenzvimbo.
- MuWebHID API, yakagadzirirwa kuwana yakaderera-chikamu kuHID zvishandiso (Human interface zvishandiso, keyboards, mbeva, gamepads, touchpads) uye kuronga basa pasina kuvapo kwevatyairi chaivo muhurongwa, iyo exclusionFilters pfuma yakawedzerwa kune chikumbiroDevice( ) chinhu, chinokutendera kuti usabatanidze zvimwe zvishandiso kana browser ichiratidza runyorwa rwezvishandiso zviripo. Semuenzaniso, unogona kusabvisa maID emidziyo ane nyaya dzinozivikanwa.
- Hazvibvumirwi kuratidza fomu rekubhadhara kuburikidza nekufona kuPaymentRequest.show() pasina mushandisi wechiito, semuenzaniso, kudzvanya pane chinhu chine chekuita nemubati.
- Tsigiro yeimwe nzira yekushandisa yeSDP (Session Description Protocol) inoshandiswa kumisa musangano muWebRTC yakamiswa. Chrome yakapa maviri SDP sarudzo - yakabatana nemamwe mabhurawuza uye Chrome-yakananga. Kubva zvino zvichienda mberi, iyo chete inotakurika sarudzo yasara.
- Kuvandudzwa kwakaitwa kune zvishandiso zvevagadziri vewebhu. Akawedzera mabhatani kuPanera yeSitayera kutevedzera kushandiswa kwerima uye rakareruka dingindira. Kudzivirirwa kweiyo Preview tebhu munetiweki yekuongorora modhi yakasimbiswa (kushandiswa kweChinyorwa Chekuchengetedza Policy kunogoneswa). Iyo debugger inoshandisa kumisa script kurodhazve mabreakpoint. Kuitwa kwekutanga kwepani itsva ye "Performance insights" kwave kukurudzirwa, izvo zvinokutendera kuti uongorore maitirwo emamwe mabasa ari papeji.
Pamusoro pehunyanzvi uye kugadzirisa kwebug, iyo nyowani vhezheni inobvisa 32 kusagadzikana. Mazhinji ekusagadzikana akaonekwa semhedzisiro yekuongorora otomatiki uchishandisa KeroSanitizer, MemorySanitizer, Kudzora Flow Kutendeseka, LibFuzzer uye AFL maturusi. Rimwe rematambudziko (CVE-2022-1853) rakapihwa nhanho yakaoma yengozi, izvo zvinoreva kugona kunzvenga mazinga ese ekudzivirira browser uye kuita kodhi pane system kunze kwesandbox nharaunda. Tsanangudzo pamusoro pekusagadzikana uku haisati yaburitswa; zvinongozivikanwa kuti zvinokonzereswa nekuwana yakasunungurwa memory block (kushandisa-mushure-yemahara) muIndexed DB API kuita.
Sechikamu chechirongwa chemari yemubairo wekutsvaga kusasimba kwekuburitswa kwazvino, Google yakabhadhara mibairo makumi maviri nemana inokosha $24 (mubairo we$65600, mubairo mumwe we$10000, mubairo we$7500, mibairo mitatu yemadhora zviuru zvishanu, mibairo ina yemadhora zviuru zvitatu, mibairo yemadhora zviuru zviviri nembiri yemadhora maviri, $7000 mabhonasi). Saizi ye5000 mibairo haisati yatarwa.
Source: opennet.ru