Google web browser kusunungurwa ... Panguva imwe chete kusunungurwa kwakagadzikana kwepurojekiti yemahara , iyo inoshanda sehwaro hweChrome. Chrome browser kushandiswa kweGoogle logos, kuvapo kwehurongwa hwekutumira zviziviso kana yaparara, kugona kudhawunirodha Flash module pakukumbira, ma module ekutamba akachengetedzwa vhidhiyo yemukati (DRM), sisitimu yekuisa otomatiki zvigadziriso uye kutapurirana panguva yekutsvaga. . Nekuda kwekuchinja kwevagadziri kuti vashande kubva kumba mukati meSARS-CoV-2 coronavirus denda, kuburitswa kweChrome 82 kwakanonoka. . Kuburitswa kunotevera kweChrome 84 kwakarongerwa Chikunguru 14.
:
- kusanganisa kwevanhu vakawanda (DoH, DNS pamusoro peHTTPS) pane masisitimu emushandisi ane masisitimu ayo anotsanangura vanopa DNS vanotsigira DoH (DoH yemupi weDNS mumwechete ichagoneswa). Semuyenzaniso, kana mushandisi aine DNS 8.8.8.8 yakataurwa muzvirongwa zvesisitimu, ipapo sevhisi yeGoogle yeDoH (βhttps://dns.google.com/dns-queryβ) ichavhurwa muChrome; kana DNS iri 1.1.1.1. XNUMX, ipapo DoH Cloudflare sevhisi ("https://cloudflare-dns.com/dns-query"), nezvimwe. Kubvisa matambudziko nekugadzirisa ma intranet emakambani, DoH haishandiswe pakusarudza mashandisirwo ebrowser pamasisitimu anotungamirwa nepakati. DoH inovharwa zvakare kana masystem ekudzora evabereki aripo.
Kudzora kuvhurwa kweDoH uye kushandura mupi weDoH kunoitwa kuburikidza neyakajairwa configurator. - Suggested kurongeka mafomu ewebhu akagadziridzwa kuti ashandiswe pamabatiro ekubata uye masisitimu evanhu vakaremara. Iyo dhizaini yakagadziridzwa neMicrosoft sechikamu chekuvandudzwa kweEdge browser uye yakaendeswa kune iyo huru Chromium codebase. Pakutanga, mamwe maitiro emafomu akagadzirwa kuti aenderane neanoshanda sisitimu zvinhu, uye mamwe akagadzirwa kuti aenderane neanonyanya kufarirwa masitaera. Nekuda kweizvi, zvinhu zvakasiyana zvaive zvakakodzerwa zvakasiyana kune ekubata skrini, akaremara masisitimu, uye keyboard zvidhiraivho. Chinangwa chekugadzirisa zvakare chaive chekubatanidza dhizaini yezvinhu zvefomu uye kubvisa kusawirirana kwemaitiro.
- Dhizaini yechikamu che "Chakavanzika uye Chengetedzo" chikamu chakashandurwa. zvishandiso zvitsva zvekuchengetedza manejimendi. Maseting ave nyore kuwana uye nyore kunzwisisa. Zvikamu zvina zvakakosha zvinopihwa, izvo zvine maturusi ane chekuita nekubvisa nhoroondo, kubata Cookies uye saiti data, nzira dzekuchengetedza uye zvinorambidzwa kana mvumo yakasungirirwa kune chaiwo masaiti. Mushandisi anogona kukurumidza kugonesa kuvharika kwewechitatu-bato Cookies yeincognito modhi kana ese masaiti, kana kuvharira ese maCookies kune chaiyo saiti. Iyo nyowani dhizaini inogoneswa chete pane masisitimu evamwe vashandisi; vamwe vanogona kumisa marongero kuburikidza ne "chrome://flags/#privacy-settings-redesign".
Saiti-chaiwo marongero akakamurwa kuita mapoka - kuwana nzvimbo, kamera, maikorofoni, zviziviso uye yekumashure data kutumira. Kune zvakare chikamu chine mamwe marongero ekuvharira JavaScript, mifananidzo uye redirects pane mamwe masaiti. Yekupedzisira mushandisi chiitiko chine chekuita nekuchinja mvumo inoratidzirwa zvakasiyana.
- Mune incognito modhi, kuvharika kwese maCookies akaiswa nevechitatu-bato masaiti, kusanganisira advertising network uye web analytics system, inogoneswa nekusarudzika. Iyo yakawedzera interface yekudzora kuisirwa kweCookies pamawebhusaiti inopihwa zvakare. Kuti udzore, mireza "chrome://flags/#improved-cookie-controls" uye "chrome://flags/#improved-cookie-controls-for-third-party-cookie-blocking" inopihwa. Mushure mekuita modhi, chiratidzo chitsva chinooneka mubhari yekero; kana yadzvanywa, iyo nhamba yeakavharika Cookies inoratidzwa uye sarudzo yekudzima kuvharira inopihwa. Iwe unogona kuona kuti ndeapi maCookies anotenderwa uye akavharirwa saiti iripo muchikamu che "Makuki" chemenu yemukati, inodanwa nekudzvanya padlock chiratidzo mune kero bhari, kana muzvirongwa.
- Zvigadziriso zvinopa bhatani idzva re "Chengetedzo cheki", iro rinopa pfupiso yezvingangoitika matambudziko ekuchengetedza, sekushandiswa kwemapassword akakanganisika, chimiro chekutarisa nzvimbo dzine hutsinye (Safe Browsing), kuvapo kwezvigadziriso zvisina kuburitswa uye kuzivikanwa kwekuwedzera kwakashata. -ons.
- Maneja epassword akawedzera kugona ese akachengetwa logins nemapassword kubva kudhatabhesi yeakakanganiswa maakaundi ine yambiro inoratidzwa kana matambudziko akaonekwa (kutarisa kunoitwa zvichibva pakutarisa hash prefix kudivi remushandisi; iwo mapassword ega uye azere hashes haafambiswe kunze). Cheki inoitwa ichipokana nedhatabhesi inofukidza anopfuura mabhiriyoni mana akakanganiswa maakaundi akaonekwa mune akaburitswa mushandisi dhatabhesi. Yambiro inoratidzwawo paunenge uchiedza kushandisa mapassword mashoma se "abc4".
- yakawedzerwa nzira yekudzivirira kubva kune ine njodzi masaiti (Yakawedzera Safe Browsing), iyo inomisikidza mamwe macheki kudzivirira kubva mukubira, kuita zvakaipa uye kumwe kutyisidzira paWebhu. Kuwedzera dziviriro kunoiswawo kuGoogle account yako neGoogle masevhisi (Gmail, Drive, etc.). Kana mune yakajairwa Safe Browsing mode macheki anoitwa munharaunda uchishandisa dhatabhesi nguva nenguva inoiswa pasystem yemutengi, ipapo mune Yakanatswa Yakachengeteka Kubhurawuza ruzivo nezvemapeji uye kudhawunirodha munguva chaiyo inotumirwa kuGoogle Safe Browsing sevhisi kuti ionekwe kudivi reGoogle, iro. inokutendera iwe kuti upindure nekukasira kutyisidzira nekukurumidza mushure mekunge vazivikanwa, pasina kumirira kuti rondedzero yemuno igadziriswe.
Kuti ikurumidze kuita basa, inotsigira pre-checking against whitelists, iyo inosanganisira hashes ezviuru zvemasayiti anozivikanwa, akavimbika. Kana iyo saiti iri kuvhurwa isiri mune chena runyorwa, bhurawuza rinotarisa iyo URL paGoogle server, ichitumira ekutanga 32 bits yeSHA-256 hash yelink, kubva panogona kuchekwa data rako pachako. Sekureva kweGoogle, iyo nzira nyowani inogona kuvandudza kushanda kweyambiro kune itsva phishing saiti ne30%.
- Panzvimbo pekuisa otomatiki maadd-on icons padivi pekero bar, menyu nyowani yaitwa, inoratidzwa nepuzzle icon, iyo inonyora zvese zviripo zvekuwedzera uye masimba avo. Mushure mekuisa yekuwedzera, mushandisi zvino anofanira kugonesa pachena icon ye-add-on kuti ipinirwe kune pani, panguva imwe chete ichiongorora mvumo inopihwa kune yekuwedzera. Kuti uone kuti iyo yekuwedzera haina kurasika, pakarepo mushure mekuisa chiratidzo chinoratidzwa neruzivo nezve nyowani yekuwedzera. Iyo menyu nyowani inogoneswa nekusarudzika kune imwe muzana yevashandisi, vamwe vanogona kuigonesa vachishandisa "chrome://flags/#extensions-toolbar-menu" kuseta.
- Yakawedzera βchrome://flags/#omnibox-context-menu-show-full-urlsβ marongero, kana agoneswa, chinhu cheβGara uchiratidzira URL yakazaraβ chinobuda mumenu yemenu yekero, inorambidza kukanganisa URL. Ngatiyeukei kuti muChrome 76 kero bhari yakashandurwa nekusarudzika kuratidza zvinongedzo zvisina "https://", "http://" uye "www.". Paive nekugadzirisa kudzima maitiro aya, asi muChrome 79 yakabviswa uye vashandisi vakarasikirwa nekugona kuratidza iyo yakazara URL mubhari kero.
- Kune vese vashandisi, iyo tab yekuronga basa ("chrome: // mireza/#tab-mapoka") inogoneswa, iyo inokutendera kuti ubatanidze akati wandei ma tabo ane zvinangwa zvakafanana mumapoka akapatsanurwa. Boka rimwe nerimwe rinogona kugoverwa ruvara rwaro uye zita. Pamusoro pezvo, sarudzo yekuyedza yekudonha nekuwedzera mapoka yakatsanangurwa, iyo isati yashanda pane ese masisitimu. Semuenzaniso, zvinyorwa zvinoverengeka zvisina kuverengwa zvinogona kudhirika kwekanguva, zvichisiya zita chete kuitira kuti zvisatore nzvimbo pakufamba, uye kudzokera kunzvimbo yavo pakudzoka pakuverenga. Kugonesa iyo modhi, iyo inokurudzirwa kuseta ndeye "chrome://flags/#tab-groups-collapse".
- Yambiro dzinogoneswa nekusarudzika paunenge uchiedza (pasina encryption) mafaera anogona kuitiswa kuburikidza nezvinongedzo kubva kuHTTPS mapeji (muChrome 84, kurodha kwemafaira anogona kudzoserwa kuchavharwa, uye yambiro ichatanga kupihwa kune zvakachengetwa). Zvinocherechedzwa kuti kudhawunirodha mafaera pasina encryption inogona kushandiswa kuita zvakashata kuburikidza nekutsiviwa kwemukati panguva yekurwiswa kweMITM. Zvakare kurodha mafaera kwakatangwa kubva kune ega eframe blocks.
- Kana uchimisikidza Adobe Flash, meseji yambiro yakawedzerwa inoratidza kuti tsigiro yeiyi tekinoroji ichapera muna Zvita 2020.
- Tekinoroji yakaitwa , iyo inokutendera kuti uvhare DOM manipulations izvo zvinotungamira kune cross-saiti scripting (DOM XSS), semuenzaniso, kana zvisizvo kugadzirisa data rakagamuchirwa kubva kumushandisi mu eval() blocks kana ".innerHTML" kuisa, izvo zvinogona kutungamirira kuJavaScript code kuva. zvakaitwa mukati meimwe peji peji. Mhando dzinovimbwa dzinoda kufanogadziriswa kwedata usati waipfuudza kumabasa ane njodzi. Semuyenzaniso, kana maTrusted Types akabatidzwa, kuita "anElement.innerHTML = location.href" zvinozokonzera kukanganisa uye zvinoda kushandiswa kwezvinhu zvakakosha zveTrustedHTML kana TrustedScript pakugovera. Kugonesa Marudzi Akavimbika kunoitwa uchishandisa CSP (Content-Security-Policy).
- itsva Cross-Origin-Embedder-Policy uye Cross-Origin-Opener-Policy HTTP misoro yekugonesa yakakosha kuyambuka-yekuzviparadzanisa modhi yekuchengetera peji-peji kushandiswa kwakasarudzika seSharedArrayBuffer, Performance.measureMemory() uye profiling APIs anogona kuve yakashandiswa kuita kurwisa chiteshi senge Specter. Cross-origin isolation mode zvakare haibvumire kuti uchinje gwaro.domain pfuma.
- Kuitwa kutsva kwehurongwa hwekuongorora kuwana zviwanikwa pamusoro petiweki inokurudzirwa - OOR-CORS (Out-Of-Renderer Cross-Origin Resource Sharing). Kuitwa kwekare kwaigona kungoongorora zvakakosha zveinjini yeBlink, XHR uye Fetch API, asi haina kuvhara zvikumbiro zveHTTP zvakaitwa kubva kune mamwe mamodule emukati. Iko kushandiswa kutsva kunogadzirisa dambudziko iri.
- MaAPI matsva akati wandei akawedzerwa kune Origin Miyedzo modhi (yekuyedza maficha anoda kupatsanurwa activation). Origin Trial inoreva kugona kushanda neiyo API yakatarwa kubva kune yakatorwa kubva kune localhost kana 127.0.0.1, kana mushure mekunyoresa uye kugamuchira yakakosha tokeni iyo inoshanda kwenguva shoma kune yakatarwa saiti.
- API , iyo inokubvumira kuti ugadzire mapurogiramu ewebhu anopindirana nemafaira ari munharaunda yefaira system. Semuenzaniso, iyo API nyowani inogona kunge iri kudiwa mubrowser-based integrated development environments, zvinyorwa, mufananidzo uye vhidhiyo edhita. Kuti ukwanise kunyora zvakananga uye kuverenga mafaera, shandisa dialogs kuvhura uye kuchengetedza mafaera, pamwe nekufamba kuburikidza nezviri mukati medhairekitori, application inobvunza mushandisi kusimbiswa kwakakosha;
- Method kufungidzira kushandiswa kwendangariro paunenge uchigadzira webhu application kana peji rewebhu. Inogona kushandiswa kuongorora uye kukwidziridza mashandisirwo endangariro mumawebhu maapplication, pamwe nekuona kuwedzera kunowedzera mukushandiswa kwendangariro.
- Method yekuronga mabasa (JavaScript callbacks) ine mazinga akasiyana ekutanga (inovhara basa remushandisi, inogadzira shanduko inooneka uye kumashure basa). Iwe unogona kushandisa chinhu cheTaskController kushandura zvakakosha uye kudzima mabasa.
- API , kubvumira maapplication kuti agadzire ega ekubata data anoshandiswa pakukodha nekudhikodha WebRTC MediaStreamTrack. Semuenzaniso, iyo API inogona kushandiswa kupa kumagumo-kusvika-kumagumo encryption yenzizi dzinofambiswa kuburikidza nesevha yekufambisa.
- Yakawedzerwa API kuziva uye decode barcode mune chaiyo mufananidzo. Iyo API inoshanda chete pamidziyo yeAroid ine Google Play Services yakaiswa.
- Yakawedzera meta tag , kubvumira saiti kuti ipe rutsigiro rwakakwana kune yakasviba theme pasina kushandisa CSS shanduko.
- Yakawedzera kugona kushandisa JavaScript modules mukati .
- MuIndexedDB nharo itsva yakawedzerwa
"durability", iyo inobvumira iwe kudzora reset yedata kune drive. Nekupfuudza kukosha kwe "relaxed" pachinzvimbo cheiyo "yakasimba" maitiro, unogona kubayira kuvimbika nekuda kwekuita (kare Chrome yaigara ichidonhedza data kudhisiki mushure mekunyora kutengeserana kwega kwega). - Yakawedzerwa @inotsigira basa kune selector() kukubvumidza kuti uone kuvepo kwevanosarudza CSS (semuenzaniso, unogona kutanga watarisa kuwanikwa kweanosarudza usati wasunga CSS masitayipi kwairi).
@inotsigira sarudzo (:: pamberi) {
div {background: green};
} - MuIntl.DateTimeFormat fractionalSecondDigits chivakwa kugadzirisa iwo mafractional masekonzi ekuratidzira fomati.
- V8 injini kuronda ArrayBuffer mumuunganidzi wemarara. WebAssembly modules inobvumirwa kukumbira kusvika ku4 GB yendangariro.
- zvishandiso zvitsva zvevagadziri vewebhu. Semuyenzaniso, modhi yakaonekwa kutevedzera maonerwo epeji nevanhu vasingaone zvakanyanya uye nemhando dzakasiyana dzeupofu hwemavara. Nzira yekutevedzera shanduko yenzvimbo yawedzerwawo, kuchinja kunobata API Intl.*, *.prototype.toLocaleString, navigator.language, Accept-Language, etc.
Iyo COEP (Cross-Origin Embedder Policy) debugger yakawedzerwa kune network yekuongorora chiitiko chekutarisa, ichikubvumidza iwe kuti uongorore zvikonzero zvekuvharira kurodha kwezvimwe zviwanikwa panetiweki. Yakawedzera iyo cookie-nzira kiyi kiyi yekusefa zvikumbiro umo iyo Cookie inosungirirwa kune chaiyo .
Yakawedzera pinning modhi yezvishandiso zvekuvandudza kuruboshwe rwechidzitiro.
Iyo interface yekutevera yakareba-inomhanya JavaScript kodhi yakagadziridzwa patsva.
- Nekuda kweCOVID-19, dzimwe shanduko dzakarongwa dzakamiswa. Semuyenzaniso, kodhi yekushanda neFTP nokusingaperi. rutsigiro rweTLS 1.0/1.1 maprotocol isati yaburitswa Chrome 84. Pakutanga
rutsigiro rweClient Hints identifier (imwe nzira kune Mushandisi-Mumiriri) zvakare kusvika Chrome 84. Shanda pa yakasundidzirwa kune gore rinouya.
Kuwedzera kune hutsva uye bug kugadzirisa, iyo nyowani vhezheni inobvisa . Kuwanda kwekusagadzikana kwakaonekwa semhedzisiro yekuongorora otomatiki nematurusi , , , ΠΈ . Hapana matambudziko akakosha akaonekwa ayo aizobvumira munhu kudarika ese mazinga ekudzivirira browser uye kuita kodhi pane system kunze kwesandbox nharaunda. Sechikamu chechirongwa chemari yemubairo wekutsvaga kusasimba kwekuburitswa kwazvino, Google yakabhadhara mibairo makumi maviri nemasere inokwana zviuru makumi manomwe nezvitanhatu zvemadhora (mubairo mumwe wemadhora zviuru makumi maviri, mubairo wemadhora gumi, mubairo wemadhora zviuru zvishanu, mibairo miviri yemadhora zviuru zvishanu, mibairo yemadhora zviuru zvitatu, mibairo miviri yemadhora zviuru zviviri, mibairo miviri yemadhora zviuru gumi. uye masere $28 mibairo). Saizi ye76 mibairo haisati yatarwa.
Source: opennet.ru