ProHoster > Blog > internet nhau > Chrome kuburitswa 84

Chrome kuburitswa 84

Google yakaunzwa web browser kusunungurwa Chrome 84... Panguva imwe chete inowanikwa kusunungurwa kwakagadzikana kwepurojekiti yemahara chromium, iyo inoshanda sehwaro hweChrome. Chrome browser zvakasiyana kushandiswa kweGoogle logos, kuvapo kwehurongwa hwekutumira zviziviso kana yaparara, kugona kudhawunirodha Flash module pakukumbira, ma module ekutamba akachengetedzwa vhidhiyo yemukati (DRM), sisitimu yekuisa otomatiki zvigadziriso uye kutapurirana panguva yekutsvaga. RLZ parameters. Kuburitswa kunotevera kweChrome 85 kwakarongerwa Nyamavhuvhu 25.

chikuru change Π² Chrome 84:

  • Yakaremara rutsigiro rweTLS 1.0 uye TLS 1.1 mapuroteni. Kuti uwane masaiti pamusoro peyakachengeteka nzira yekutaurirana, sevha inofanirwa kupa rutsigiro rweinenge TLS 1.2, zvikasadaro browser icharatidza kukanganisa. Sekureva kweGoogle, parizvino ingangoita 0.5% yekudhawunirodha peji rewebhu inoramba ichiitwa pachishandiswa vhezheni dzekare dzeTLS. Kuvhara kwakaitwa maererano mazano IETF (Internet Engineering Task Force). Chikonzero chekuramba TLS 1.0 / 1.1 kushaikwa kwerutsigiro rwemaciphers emazuva ano (semuenzaniso, ECDHE neAEAD) uye chinodiwa chekutsigira maciphers ekare, kuvimbika kwacho kunobvunzwa panguva ino yekuvandudza tekinoroji yekombuta (semuenzaniso. , panodiwa rutsigiro rweTLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA, MD5 neSHA-1). Kurongeka kunobvumira kudzoka kuTLS 1.0/1.1 kuchachengetwa kusvika Ndira 2021.
  • Kuvharira kwakapihwa bhutsu isina kuchengeteka (pasina encryption) yemafaira anogona kuitiswa uye yakawedzera yambiro paunenge uchirodha zvinyorwa zvisina kuchengeteka. Mune ramangwana, zvakarongwa kumira zvishoma nezvishoma kutsigira faira kurodha pasina encryption. Kuvharira kunoitwa nekuti kurodha mafaera pasina encryption kunogona kushandiswa kuita zvakaipa nekutsiva zvirimo panguva yekurwiswa kweMITM.
  • Added rubatsiro rwekutanga chitarisiko Client Hints, yakagadziridzwa seimwe nzira kune Mushandisi-Agent musoro. Iyo Client Hints michina inopa akatevedzana e "Sec-CH-UA-*" misoro sechinzvimbo cheMushandisi-Mumiriri, iyo inokutendera iwe kuronga yakasarudzika kuendesa data nezve chaiyo browser uye system paramita (vhezheni, chikuva, nezvimwewo) chete. mushure mekukumbira neserver. Mushandisi anowana mukana wekuona kuti ndeapi ma paramita anogamuchirwa pakutumira uye nekusarudza kupa ruzivo rwakadaro kune varidzi vesaiti. Paunenge uchishandisa Client Hints, chiziviso hachifambiswe nekusarudzika pasina chikumbiro chakajeka, izvo zvinoita kuti kusazivikanwa kusingaite (nekudaro, chete zita rebhurawuza rinoratidzwa). basa pamusoro Mushandisi-Mumiriri kubatana kusundirwa mberi kusvika gore rinouya.
  • Kuenderera mberi activation
    more stringent kurambidzwa kutamiswa kweCookies pakati pemasayiti, aive kukanzurwa nekuda kweCOVID-19. Kune zvisiri zveHTTPS zvikumbiro, kugadzirisa kwechitatu-bato Makuki akaiswa kana uchiwana masaiti kunze kweiyo dura reiyo peji inorambidzwa. MaCookies akadaro anoshandiswa kuteedzera mafambiro evashandisi pakati pemasaiti mune kodhi yekushambadzira network, social network widget uye web analytics masisitimu.

    Rangarira kuti kudzora kutapurirana kweCookie, iyo SameSite hunhu hunotsanangurwa muSet-Cookie musoro unoshandiswa, iyo nekusarudzika ichaiswa kune kukosha "SameSite=Lax", iyo inomisa kutumira kweCookies kune yecross-saiti zvikumbiro zvishoma. , sechikumbiro chemufananidzo kana kurodha zvemukati kuburikidza neiframe kubva kune imwe saiti. MaSaiti anogona kupfuudza maitiro eSameSite nekunyatso kuseta Cookie kuSameSite=Hapana. Uyezve, kukosha kweSameSite=Hapana yeCookie inogona kungoiswa muSecurity mode (inoshanda pakubatanidza kuburikidza neHTTPS). Shanduko inozoiswa mumatanho, kutanga nechikamu chidiki chevashandisi uyezve zvishoma nezvishoma kuwedzera kusvika kwayo.

  • Kuitwa kwekuedza kwakawedzerwa zviwanikwa-yakanyanya ad blocker, iyo inogona kugoneswa uchishandisa "chrome://flags/#enable-heavy-ad-intervention" setting. Iyo blocker inobvumidza iwe kudzima otomatiki zvivharo zveiframe mushure mekunge traffic uye CPU mutoro zvikumbaridzo zvapfuudzwa. Iko kuvharira kunokonzereswa kana tambo huru yapedza anopfuura 60 masekonzi eCPU nguva yakazara kana 15 masekonzi mu 30-second interval (ichipedza 50% yezviwanikwa kweanopfuura masekonzi makumi matatu), uyezve kana inopfuura 30 MB. yedata yakatorwa netiweki.

    Iko kuvharira kunoshanda chete kana, miganho isati yapfuudzwa, mushandisi asina kupindirana neiyo advertising unit (semuenzaniso, haana kudzvanya pairi), iyo, ichifunga nezvezvirambidzo zvetraffic, inobvumira iyo auto-playback yehombe. mavhidhiyo ekushambadza kuti avharwe pasina mushandisi kuvhura kutamba. Matanho akarongwa achaponesa vashandisi kubva mukushambadzira nekusaita kodhi kodhi kana kuita nemaune parasitic chiitiko (semuenzaniso, migodhi). Maererano nehuwandu hweGoogle, kushambadzira kunosangana nemaitiro ekuvharira kunogadzira chete 0.30% yezvikamu zvese zvekushambadzira, asi panguva imwe chete, kushambadzira kwakadaro kunodya 28% yeCPU zviwanikwa uye 27% yetraffic kubva kuhuwandu hwehuwandu hwekushambadzira.

  • Basa rakaitwa kudzikisa mashandisirwo eCPU zviwanikwa kana hwindo rebrowser risiri mumunda wemushandisi wekuona. Chrome ikozvino inotarisa kana hwindo rebrowser rakaputirwa nemamwe mahwindo uye inodzivirira kudhirowa pixels munzvimbo dzinopindirana. Ichi chitsva chinoburitswa zvishoma nezvishoma: optimization ichave yakasarudzika kune vamwe vashandisi muChrome 84, uye kune vamwe muChrome 85.
  • Kudzivirirwa kunogoneswa nekusarudzika zvinogumbura zviziviso, semuenzaniso, spam nezvikumbiro zvekugamuchira zviziviso zvepush. Sezvo zvikumbiro zvakadaro zvichikanganisa basa remushandisi uye zvinokanganisa kutarisa kubva muzviito mukusimbisa dialog, pachinzvimbo chekurukurirano yakaparadzana mubhawa rekero, ruzivo rwekukurumidza rusingade chiito kubva kumushandisi rwunoratidzwa neyambiro yekuti chikumbiro chemvumo chakavharwa. , iyo inongodzikiswa kuita chiratidzo nemufananidzo webhero rakachinjika. Nekudzvanya pane chiratidzo, unogona kumisa kana kuramba mvumo yakakumbirwa chero nguva yakakodzera.

    Chrome kuburitswa 84

  • Sarudzo yemushandisi inoyeukwa pakuvhura zvibatiso zvekunze maprotocol - mushandisi anogona kusarudza "gara uchibvumira iyi saiti" kune yakasarudzika mubati uye bhurawuza icharangarira iyi sarudzo maererano nesaiti iripo.
  • Yakawedzerwa dziviriro kubva pakuchinja kwevashandisi marongero pasina mvumo yakajeka. Kana iyo yekuwedzera ikachinja injini yekutsvaga yakasarudzika kana peji inoratidzwa tebhu nyowani, bhurawuza inozoratidza nhaurirano ichikukumbira kuti usimbise kushanda kwataurwa kana kukanzura shanduko.
  • Kuenderera mberi kusevenzeswa kwedziviriro kubva pakurodha zvakasanganiswa multimedia zvirimo (kana zviwanikwa zvaiswa pane peji reHTTPS kuburikidza ne http: // protocol). Pamapeji akavhurwa kuburikidza neHTTPS, "http://" zvinongedzo zvino zvave kungotsiviwa ne "https://" mumabhuroki ane chekuita nekurodha mifananidzo (zvinyorwa uye iframes zvakambotsiviwa, kutsiva otomatiki kwemaodhiyo nemavhidhiyo zviwanikwa zvinotarisirwa mukati. kuburitswa kunotevera). Kana mufananidzo usingawanikwe kuburikidza ne https, saka kudhawunirodha kwayo kwakavharwa (iwe unogona kumaka kuvharika kuburikidza nemenu inowanikwa kuburikidza nechiratidzo chekuvhara mubhari yekero).
  • Yakawedzera API rutsigiro Webhu OTP (yakagadzirwa seSMS Receiver API), iyo inokutendera kuti uronge kupinda kwepassword yenguva imwe chete pane peji rewebhu mushure mekugamuchira meseji yeSMS ine kodhi yekusimbisa inounzwa kumushandisi Android smartphone iyo browser iri kushanda. Kusimbiswa kweSMS, semuenzaniso, kunogona kushandiswa kusimbisa nhamba yefoni inotsanangurwa nemushandisi panguva yekunyoresa. Kana kare mushandisi aifanira kuvhura iyo SMS application, kopira iyo kodhi kubva kwairi kuenda kune clipboard, dzokera kubrowser uye unamate iyi kodhi, ipapo iyo API nyowani inoita kuti zvikwanise kuita otomatiki iyi nzira uye kuidzikisa kune imwechete kubata.
  • API yakawedzerwa Mifananidzo yewebhu
    kudzora kutambwa kwewebhu animation. Kuburitswa kutsva kunowedzera tsigiro yekugadzira mashandiro, zvichikubvumidza iwe kudzora masanganisirwo anosanganisirwa uye nekupa vabati vatsva vanodanwa kana zviitiko zvekutsiva zvemukati zvikaitika. Iyo Webhu Animations API zvakare ikozvino inotsigira Promise kutsanangura marongero anoratidzwa animations uye kudzora zvirinani kuti maanimation anopindirana sei nemamwe maficha ekushandisa.

  • MaAPI matsva akati wandei akawedzerwa kune Origin Miyedzo modhi (yekuyedza maficha anoda kupatsanurwa activation). Origin Trial inoreva kugona kushanda neiyo API yakatarwa kubva kune yakatorwa kubva kune localhost kana 127.0.0.1, kana mushure mekunyoresa uye kugamuchira yakakosha tokeni iyo inoshanda kwenguva shoma kune yakatarwa saiti.
    • API Cookie Store yevashandi veSevhisi kuwana HTTP Cookies, inoshanda seimwe asynchronous imwe nzira yekushandisa document.cookie.
    • API Idle Detection kuti uone kusashanda kwemushandisi, zvichikubvumidza kuti uone nguva iyo mushandisi asiri kupindirana nekhibhodi / mbeva, iyo skrini saver iri kushanda, skrini yakavharwa, kana basa riri kuitwa pane imwe tarisisa. Kuzivisa chikumbiro nezvekusaita basa kunoitwa nekutumira chiziviso mushure mekusvika pane yakatarwa kusaita chikumbaridzo.
    • Mode Origin Isolation, inobvumira mugadziri kuti ashandise kuparadzaniswa kwakazara kwekugadziriswa kwemukati mune yakaparadzana maitiro ane chekuita nekwakabva (mavambo - domain + port + protocol), pane saiti, nemutengo wekurega kutsigirwa kwezvimwe zvinhu zvenhaka, senge synchronous. kuitwa kwezvinyorwa uchishandisa document.domain uye kufona postMessage() kutumira mameseji kuWebAssembly.Module zviitiko. Mune mamwe mazwi, Origin Isolation inokutendera kuti uronge kupatsanurana pakati pemaitiro akasiyana zvichienderana nenzvimbo yechishandiso, uye kwete saiti ine zvese zvekunze zvinosanganisirwa pamapeji.
    • API WebAssembly SIMD yekushandisa vector SIMD mirairo mumashandisirwo muWebAssembly fomati. Kuti ive nechokwadi chekuzvimirira kwepuratifomu, inopa mhando nyowani ye128-bit inogona kumiririra marudzi akasiyana e data rakazara, uye akati wandei ekutanga mavhita mashandiro ekugadzirisa data rakazara. SIMD inokutendera iwe kuti uwedzere kugadzirwa nekufananidza kugadzirisa kwedata uye ichave inobatsira paunenge uchinyora kodhi yemuno muWebAssembly. Kuti ugone kugonesa SIMD rutsigiro, unogona kushandisa iyo "chrome://flags/#enable-webassembly-simd" kuseta.
  • Yakagadzikana uye ikozvino yakagoverwa kunze kweOrigin Miedzo
    API Content Indexing, iyo inopa metadata nezvemukati izvo zvakambochengetwa newebhu maapplication anoshanda muProgressive Web Apps (PWS) modhi. Chishandiso chinogona kuchengetedza data rakasiyana padivi rebrowser, kusanganisira mifananidzo, mavhidhiyo uye zvinyorwa, uye kana network yarasika, ishandise uchishandisa Cache Storage uye IndexedDB APIs. Content Indexing API inoita kuti zvikwanise kuwedzera, kutsvaga uye kudzima zviwanikwa zvakadaro. Mubrowser, API iyi yatoshandiswa kunyora rondedzero yemapeji uye data yemultimedia inowanikwa kuti itarise pasina Indaneti.

  • API shanduro yakagadzikana Wake lock zvichibva paPromise mechanism, iyo inopa nzira yakachengeteka yekudzora kuvharika kweauto-lock skrini uye kushandura zvishandiso kune ekuchengetedza simba modes.
  • Mushanduro yepuratifomu yeAndroid akawedzera Tsigiro yezvipfupi zvekushandisa, zvichikubvumidza iwe kuti upe nekukurumidza kuwana kune yakakurumbira zviito zviito mukushandisa. Kuti ugadzire mapfupi, ingo wedzera zvinhu kuwebhu application manifest muPWA (Progressive Web Apps) fomati.
    Chrome kuburitswa 84

  • Web Worker inotenderwa kushandisa API ReportingObserver, iyo inokutendera kuti utsanangure mubati wekugadzira rondedzero, inodanwa kana uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchikwanisa kugona. Chirevo chakagadzirwa chinogona kuchengetwa, kutumirwa kuseva, kana kugadziridzwa neJavaScript script pakufunga kwemushandisi.
  • API yakagadziridzwa Resize Observer, iyo inokutendera kuti ubatanidze mubatiri kune izvo zviziviso nezve shanduko muhukuru hwezvinhu zvakatsanangurwa pane peji zvichatumirwa. Zvivakwa zvitatu zvitsva zvakawedzerwa kuResizeObserverEntry: zvemukatiBoxSize, muganhuBoxSize uye mudziyoPixelContentBoxSize kuti ipe rumwe ruzivo rwegranular, yakadzoserwa seyakarongwa yeResizeObserverSize zvinhu.
  • Added keyword "dzokeraΒ»kumisazve chimiro chechimiro kune chayo kukosha kwayo.
  • Yakabvisa prefix yeCSS properties "-webkit-appearance" uye "-webkit-ruby-position", yave kuwanikwa se "maonekero"Uye"ruby-chinzvimbo".
  • MuJavaScript itwa tsigiro yenzira dzekumaka uye zvivakwa zvekirasi seyakavanzika, mushure mezvo kuwana kwavari kunozovhurwa mukati mekirasi chete (kare minda chete yaigona kuve yakavanzika). Kumaka nzira uye zvivakwa zvakavanzika: ratidza pamberi pezita remunda pane "#" chiratidzo.
  • MuJavaScript akawedzera kutsigira weak links (reference isina simba) kuJavaScript zvinhu zvinokutendera kuti uchengetedze chirevo chechinhu, asi usavhare muunganidzi wemarara kudzima chinhu chakabatana. Tsigiro yevanopedzisa yawedzerwawo, zvichiita kuti zvikwanise kutsanangura mubatiri anonzi mushure mekuunganidzwa kwemarara kwechinhu chakatsanangurwa kwapera.
  • Kutangwa kwezvikumbiro paWebAssembly kwave kukurumidzirwa, nekuda kwekushandiswa mune yekutanga (baseline) Liftoff compiler. atomic mirayiridzo ΠΈ batch memory mashandiro. Zvishandiso zvekugadzirisa WebAssembly zvakagadziridzwa, kuita kwekugadzirisa kwakagadziridzwa zvakanyanya kana uchishandisa breakpoints (kare, muturikiri aishandiswa kugadzirisa, uye ikozvino Liftoff compiler).
  • Muzvishandiso zvevagadziri vewebhu pphttps://developers.google.com/web/updates/2020/05/devtools mapanera ekuongorora maitiro akagadziridzwa. Yakawedzera ruzivo rwakakwana nezve metric TBT (Nguva Yekuvharira Yese), inoratidza kuti peji inoratidzika kunge iripo kwenguva yakareba sei, asi haisati yavepo (kureva kuti peji yakatoitwa, asi kuitwa kwetambo huru kuchiri kuvharwa uye kupinda kwedata hakugoneke). Yakawedzera chikamu chitsva cheZvakaitika chekuongorora mametrics CLS (Cumulative Layout Shift), inoratidza kugadzikana kwekuona kwezviri mukati. Iyo CSS masitaera yekuongorora mapaneru inopa tarisiro yemifananidzo yakatsanangurwa kuburikidza ne "background-image" pfuma.

Kuwedzera kune hutsva uye bug kugadzirisa, iyo nyowani vhezheni inobvisa 38 kushaya simba. Kuwanda kwekusagadzikana kwakaonekwa semhedzisiro yekuongorora otomatiki nematurusi AddressSanitizer, MemorySanitizer, Kudzora Kuyerera Kutendeseka, LibFuzzer ΠΈ AFL. Imwe nyaya (CVE-2020-6510, buffer kufashukira mune yekunotora kumashure inobata) yakanyorwa seinonetsa, i.e. inokutendera kuti upfuure ese mazinga ebrowser kuchengetedza uye kuita kodhi pane system kunze kwesandbox nharaunda. Sechikamu chechirongwa chekubhadhara mibairo yemari yekuwana kusaita zvakanaka pakuburitswa kwazvino, Google yakabhadhara mibairo makumi maviri nematanhatu inokosha $26 (mibairo miviri yemadhora zviuru zvishanu, mibairo yemadhora zviuru zvitatu, mubairo mumwe wemadhora zviuru zviviri, mibairo yemadhora zviuru zviviri, uye mibairo mitatu yemadhora mazana mashanu). Hukuru hwemibairo gumi nematanhatu haisati yazivikanwa.

Source: opennet.ru

Voeg