ProHoster > Blog > internet nhau > Chrome kuburitswa 91

Chrome kuburitswa 91

Google yakazarura kusunungurwa kwewebhu Chrome 91. Panguva imwecheteyo, kusunungurwa kwakagadzikana kweprojekti yeChromium yakasununguka, iyo inoshanda senheyo yeChrome, inowanikwa. Iyo Chrome browser inosiyaniswa nekushandiswa kweGoogle logos, kuvapo kweiyo system yekutumira zviziviso kana yaparara, mamodule ekutamba akachengetedzwa vhidhiyo yemukati (DRM), sisitimu yekuisa otomatiki zvigadziriso, uye kutumira RLZ paramita paunenge uchitsvaga. Kuburitswa kunotevera kweChrome 92 kwakarongerwa Chikunguru 20.

Kuchinja kukuru muChrome 91:

  • Yakaita kugona kumisa kuita kweJavaScript muboka rakadonha retibhu. Chrome 85 yakaunza tsigiro yekuronga ma tabo mumapoka anogona kubatanidzwa neimwe ruvara uye label. Paunodzvanya pazita reboka, ma tabo ane hukama nawo anodonha uye rimwe zita rinosara panzvimbo (kudzvanya pane iyo label kunovhura boka racho). Mukuburitswa kutsva, kuitira kudzikisa mutoro weCPU uye kuchengetedza simba, chiitiko mumatabu akaderedzwa chakamiswa. Kusarudzika kunongoitirwa ma tabo anoridza ruzha, shandisa iyo Webhu Locks kana IndexedDB API, batanidza kune USB mudziyo, kana kutora vhidhiyo, ruzha, kana hwindo zvemukati. Shanduko ichaburitswa zvishoma nezvishoma, kutanga nechikamu chidiki chevashandisi.
  • Inosanganisirwa tsigiro yenzira yakakosha yechibvumirano inoshingirira kune brute force pamakomputa equantum. Makomputa eQuantum anokurumidza kukurumidza kugadzirisa dambudziko rekuparadza nhamba yechisikigo kuita zvinhu zvakakosha, izvo zviri pasi pemazuva ano asymmetric encryption algorithms uye haigone kugadziriswa zvinobudirira pane classical processors. Kuti ishandiswe muTLSv1.3, iyo CECPQ2 (Yakasanganiswa Elliptic-Curve uye Post-Quantum 2) plugin inopihwa, ichibatanidza yakasarudzika X25519 kiyi yekutsinhana nzira neHRSS chirongwa chakavakirwa paNTRU Prime algorithm, yakagadzirirwa post-quantum cryptosystems.
  • Tsigiro yeTLS 1.0 neTLS 1.1 maprotocol, ayo akaitwa kusashanda neIETF (Internet Engineering Task Force) komiti, yakamiswa zvachose. Kusanganisira mukana wekudzosa TLS 1.0/1.1 nekushandura iyo SSLVersionMin mutemo wabviswa.
  • Magungano epuratifomu yeLinux anosanganisira kushandiswa kwe "DNS pamusoro peHTTPS" (DoH, DNS pamusoro peHTTPS) modhi, iyo yakaunzwa kune vashandisi veWindows, macOS, ChromeOS uye Android. DNS-pamusoro-HTTPS inozoitwa otomatiki kune vashandisi vane marongero anotsanangura DNS vanopa vanotsigira tekinoroji iyi (yeDNS-pamusoro-HTTPS mupi mumwe chete unoshandiswa seDNS). Semuyenzaniso, kana mushandisi aine DNS 8.8.8.8 yakataurwa mumasetin'i sisitimu, ipapo Google's DNS-over-HTTPS sevhisi ("https://dns.google.com/dns-query") inozoitwa muChrome kana DNS. iri 1.1.1.1 , ipapo DNS-over-HTTPS service Cloudflare ("https://cloudflare-dns.com/dns-query"), nezvimwewo.
  • Port 10080, iyo inoshandiswa muAmanda backup uye VMWare vCenter, yakawedzerwa kune rondedzero yeakarambidzwa network ports. Kare, ports 69, 137, 161, 554, 1719, 1720, 1723, 5060, 5061 uye 6566 dzanga dzakatovharwa. Pazviteshi pane blacklist, kutumira HTTP, HTTPS uye FTP zvikumbiro kunovharwa kuitira kudzivirira kubva kuNaT slip yekurwisa. , iyo inobvumira kana yakavhurwa peji rewebhu rakanyatsogadzirirwa neanorwisa mubrowser kuti amise network yekubatanidza kubva kune anorwisa server kune chero UDP kana TCP port pane mushandisi system, kunyangwe nekushandiswa kwekero yemukati (192.168.xx, 10) .xxx).
  • Zvinogoneka kugadzirisa otomatiki kuvhurwa kweakamira-yega webhu application (PWA - Progressive Web Apps) kana mushandisi apinda muhurongwa (Windows uye macOS). Autorun inogadziriswa pane chrome://apps peji. Iko kushanda kuri kuedzwa pachikamu chidiki chevashandisi, uye kune vamwe vese zvinoda kumisa iyo "chrome://flags/#enable-desktop-pwas-run-on-os-login" kuseta.
  • Sechikamu chebasa rekufambisa bhurawuza kuti ishandise izwi rinosanganisirwa, iyo "master_preferences" faira rapihwa zita rekuti "initial_preferences". Kuti uchengetedze kuenderana, rutsigiro rwe "master_preferences" rucharamba rwuri mubrowser kwenguva yakati. Pakutanga, bhurawuza rakanga ratobvisa kushandiswa kwemazwi ekuti "whitelist", "blacklist" uye "native".
  • Iyo Enhanced Safe Browsing mode, iyo inomutsa mamwe macheki kudzivirira kubva mukubira, kuita zvakaipa uye kumwe kutyisidzira paWebhu, inosanganisira kugona kutumira mafaera akadhawunirodha kuti atarise kudivi reGoogle. Pamusoro pezvo, Kuvandudzwa Kwakachengeteka Kutsvaga kunoisa accounting kune ma tokens akasungirirwa kuGoogle account kana uchizivisa kuyedza phishing, pamwe nekutumira Referrer header kukosha kumaseva eGoogle kuti atarise kutumira kubva kune yakaipa saiti.
  • Muchinyorwa chepuratifomu yeAroid, dhizaini yemhando yewebhu yakagadziridzwa, iyo yakagadziridzwa kuti ishandiswe pamabatiro ekubata uye masisitimu evanhu vakaremara (yedesktop system, dhizaini yakaitwa patsva muChrome 83). Chinangwa chekugadzirisa zvakare chaive chekubatanidza dhizaini yemafomu emafomu uye kubvisa kusawirirana kwemaitiro - kare, mamwe maitiro emafomu akagadzirwa zvinoenderana neanoshanda system interface zvinhu, uye zvimwe zvinoenderana neanonyanya kufarirwa masitaera. Nekuda kweizvi, zvinhu zvakasiyana zvaive zvakakodzerwa zvakasiyana kune touchscreens uye masisitimu evanhu vakaremara.
    Chrome kuburitswa 91Chrome kuburitswa 91
  • Yakawedzera vhoti yemushandisi inoratidzwa pakuvhura iyo Yakavanzika Sandbox marongero (chrome://settings/privacySandbox).
  • Paunenge uchimhanyisa iyo Android vhezheni yeChrome pahwendefa maPC ane makuru skrini, chikumbiro chinoitirwa iyo desktop desktop yesaiti, uye kwete edition yenharembozha. Unogona kushandura maitiro uchishandisa "chrome://flags/#request-desktop-site-for-tablets".
  • Iyo kodhi yekupa matafura yakagadziridzwa zvakare, izvo zvakatibvumira kugadzirisa matambudziko nekusaenderana muhunhu kana tichiratidza matafura muChrome uye muFirefox/Safari.
  • Kugadziriswa kwezvitupa zvesevha kubva kuSpain certification chiremera Camerfirma kwakamiswa nekuda kwezviitiko zvinogara zvichiitika kubvira 2017 zvinosanganisira kutyorwa mukupihwa kwezvitupa. Tsigiro yezvitupa zvevatengi inochengetwa; kuvharira kunongoshanda kune zvitupa zvinoshandiswa paHTTPS saiti.
  • Isu tinoenderera mberi nekushandisa tsigiro yetiweki segmentation kudzivirira nzira dzekutevera mafambiro evashandisi pakati pesaiti zvichibva pakuchengetedza zviziviso munzvimbo dzisina kuitirwa kuchengetedza zvachose ruzivo ("Supercookies"). Nekuti zviwanikwa zvakachengetwa zvakachengetwa munzvimbo yakajairika, zvisinei nenzvimbo yekubva, imwe saiti inogona kuona kuti imwe saiti iri kurodha zviwanikwa nekutarisa kuti iyo sosi iri mu cache. Dziviriro yakavakirwa pakushandiswa kwetiweki segmentation (Network Partitioning), musimboti wekuwedzera kune yakagovaniswa cache yakawedzera kusunga kwemarekodhi kune iyo dura rinovhurwa iro peji guru, iro rinomisa cache kufukidzwa kwekufamba kwekutevera zvinyorwa chete. kune yazvino saiti (script kubva kune iframe haizokwanise kutarisa kana sosi yakatorwa kubva kune imwe saiti).

    Mutengo wekuparadzanisa kuderera kwekushanda kwecaching, zvichiita kuti kuwedzere kuduku munguva yekutakura peji (yakawanda ne1.32%, asi ye80% yemasayiti ne0.09-0.75%). Kuti uedze iyo segmentation mode, unogona kumhanyisa bhurawuza nesarudzo β€œ-enable-features=PartitionConnectionsByNetworkIsolationKey, PartitionExpectCTStateByNetworkIsolationKey, PartitionHttpServerPropertiesByNetworkIsolationKey, PartitionNelAndReportingByNetworkKeysIsolationIsolation CacheB yNetworkIsolationKey".

  • Yakawedzerwa yekunze REST API VersionHistory (https://versionhistory.googleapis.com/v1/chrome), kuburikidza iyo iwe unogona kuwana ruzivo nezve Chrome shanduro zvine chekuita nemapuratifomu nemapazi, pamwe nebrowser yekuvandudza nhoroondo.
  • Mune iframes inotakurwa kubva kune mamwe madomasi kunze kweiyo dura reiyo peji peji, kuratidzwa kweJavaScript dialogs alert (), simbisa () uye kukurumidza () kunorambidzwa, izvo zvinodzivirira vashandisi kubva pakuedza kwechitatu-bato script kuratidza mameseji pasi pe fungidzira kuti chiziviso chakaratidzwa nesaiti huru.
  • Iyo WebAssembly SIMD API yakagadzikiswa uye yakapihwa nekusarudzika yekushandisa vector SIMD mirairo muWebAssembly-yakarongwa maapplication. Kuti ive nechokwadi chekuzvimirira kwepuratifomu, inopa mhando nyowani ye128-bit inogona kumiririra marudzi akasiyana e data rakazara, uye akati wandei ekutanga mavhita mashandiro ekugadzirisa data rakazara. SIMD inokutendera iwe kuti uwedzere kugadzirwa nekufananidza kugadzirisa kwedata uye ichave inobatsira paunenge uchinyora kodhi yemuno muWebAssembly.
  • MaAPI matsva akati wandei akawedzerwa kune Origin Miyedzo modhi (yekuyedza maficha anoda kupatsanurwa activation). Origin Trial inoreva kugona kushanda neiyo API yakatarwa kubva kune yakatorwa kubva kune localhost kana 127.0.0.1, kana mushure mekunyoresa uye kugamuchira yakakosha tokeni iyo inoshanda kwenguva shoma kune yakatarwa saiti.
    • WebTransport iprotocol uye inoperekedza JavaScript API yekutumira uye kugamuchira data pakati pebrowser neseva. Iyo nzira yekukurukurirana yakarongwa pamusoro peHTTP/3 ichishandisa QUIC protocol sechokufambisa, icho, ichowo, chinowedzera kune UDP protocol inotsigira kuwanda kwekubatanidza akawanda uye inopa encryption nzira dzakaenzana neTLS/SSL.

      WebTransport inogona kushandiswa panzvimbo yeWebSockets uye RTCDataChannel michina, ichipa mamwe maitiro akadai seakawanda-stream transmission, unidirectional streams, out-of-order delivery, yakavimbika uye isina kuvimbika nzira dzekutumira. Mukuwedzera, WebTransport inogona kushandiswa panzvimbo yeServer Push mechanism, iyo Google yakasiya muChrome.

    • Iyo inozivisa interface yekutsanangura zvinongedzo kune yakamira-yega webhu maapplication (PWAs), inogoneswa uchishandisa iyo Capture_links parameter muwebhu application manifest uye ichibvumira mawebhusaiti kuti avhure otomatiki hwindo idzva rePWA kana chinongedzo chekunyorera chadzvanywa kana chinja kune imwe-hwindo modhi, zvakafanana ne mobile application.
    • Yakawedzera iyo WebXR Plane Detection API, iyo inopa ruzivo nezve planar nzvimbo mune chaiyo 3D nharaunda. Iyo API yakatsanangurwa inoita kuti zvibvirire kudzivirira-yakakura-kugadziriswa kwedata rinowanikwa kuburikidza nekufona MediaDevices.getUserMedia(), uchishandisa priprietary kuitiswa kwekombuta yekuona algorithms. Rega tikuyeuchidze kuti WebXR API inokutendera kuti ubatanidze basa nemakirasi akasiyana emidziyo yechokwadi chaiyo, kubva kune yakamira 3D helmets kusvika kune mhinduro dzinobva panharembozha.
  • Tsigiro yekushanda neWebSockets pamusoro peHTTP/2 (RFC 8441) yaitwa, iyo inoshanda chete kune zvakachengeteka zvikumbiro kuWebSockets uye pamberi peyakatosimbiswa HTTP/2 yekubatanidza neseva, iyo yakazivisa tsigiro ye "WebSockets pamusoro. HTTP/2” kuwedzera.
  • Miganhu pane chaiyoiyo yenguva yakakosha inogadzirwa nekufona ku performance.now() inopindirana pamapuratifomu ese anotsigirwa uye inogadzika mukana wekuparadzanisa vanobata mune akasiyana maitiro. Semuyenzaniso, padesktop system, iko iko kurongeka kana kugadziridzwa munzvimbo dzisiri dzega kwakadzikiswa kubva pa5 kusvika ku100 microseconds.
  • Desktop inovaka ikozvino inosanganisira kugona kuverenga mafaera kubva pa clipboard (kunyora mafaera kune clipboard kuchiri kurambidzwa). async basa paNamira(e) {rega faira = e.clipboardData.files[0]; regai zviri mukati = kumirira file.text(); }
  • CSS inoshandisa iyo @counter-style mutemo, iyo inokutendera kuti utsanangure maitiro ako emakaunda uye mavara mune akaverengerwa rondedzero.
  • Iwo CSS pseudo-makirasi ":host()" uye ":host-context ()" akawedzera kugona kupfuudza imwechete tsika dzevanosarudza komputa ( ) kuwedzera kune mazita evanosarudza ( )
  • Yakawedzera GravitySensor interface yekutarisa volumetric (matatu akarongeka maaxes) data kubva kune giravhiti sensor.
  • Iyo File System Access API inopa kugona kutsanangura kurudziro yekusarudza zita refaira uye dhairekitori rinopihwa mudialog yekugadzira kana kuvhura faira.
  • Iframes dzakatakurwa kubva kune dzimwe nzvimbo dzinobvumirwa kuwana WebOTP API kana mushandisi akapa mvumo yakakodzera. WebOTP inokutendera kuti uverenge-kamwe-nguva yekusimbisa makodhi anotumirwa kuburikidza neSMS.
  • Inotenderwa kugovera kuwana magwaro emasaiti akabatanidzwa uchishandisa iyo DAL (Dhijitari Asset Links), iyo inobvumira maapplication eAroid kuti abatanidzwe nemasaiti kurerutsa kupinda.
  • Vashandi vebasa vanobvumira kushandiswa kweJavaScript modules. Paunotsanangura rudzi rwe 'module' paunenge uchifonera muvaki, zvinyorwa zvakatsanangurwa zvinoiswa mumhando yemamodule uye anowanikwa kuti apinzwe kunze mumamiriro evashandi. Tsigiro yemodule inoita kuti zvive nyore kugovera kodhi pamapeji ese ewebhu uye vashandi vebasa.
  • JavaScript inopa kugona kutarisa kuvepo kweminda yakavanzika muchinhu uchishandisa "#foo in obj" syntax. kirasi A {static test(obj) {console.log(#foo in obj); } #foo = 0; } A.test(itsva A()); // chokwadi A.test({}); // nhema
  • JavaScript nekusarudzika inobvumira kushandiswa kweiyo yekumirira keyword mumamodule padanho repamusoro, iyo inobvumira mafoni asynchronous kuti anyatso kubatanidzwa mune module yekurodha maitiro uye inodzivirira kuiputira mu "async basa". Semuenzaniso, panzvimbo ye (async function() {wait Promise.resolve(console.log('test')); }()); ikozvino unogona kunyora wakamirira Promise.resolve(console.log('test'));
  • Injini yeV8 JavaScript yakavandudza kushanda kwe template caching, iyo yakawedzera kukurumidza kwekupfuura Speedometer4.5-FlightJS test ne 2%.
  • Chikamu chikuru chekuvandudzwa chakaitwa kune zvishandiso zvevagadziri vewebhu. A new Memory inspector mode yakawedzerwa, ichipa maturusi ekuongorora ArrayBuffer data uye Wasm memory.
    Chrome kuburitswa 91

    Chidimbu chekuita chiratidzo chakawedzerwa kune Performance panel, ichikubvumidza kuti utonge kuti saiti inoda optimization here kana kuti kwete.

    Chrome kuburitswa 91

    Maonero emifananidzo muPanera yeElements uye Network Analysis pani inopa ruzivo nezve chimiro chemufananidzo, sarudzo dzekupa, uye saizi yefaira.

    Chrome kuburitswa 91

    Munetiweki yekuongorora pani, zvino zvave kugoneka kushandura yakagamuchirwa kukosha kweiyo Content-Encoding musoro.

    Chrome kuburitswa 91

    Muchikamu chemaitiro, iwe unogona ikozvino kukurumidza kuona iyo yakaverengerwa kukosha paunenge uchifambisa kuburikidza neCSS paramita nekusarudza "Ona computed kukosha" mune yemukati menyu.

    Chrome kuburitswa 91

Pamusoro pehunyanzvi uye kugadzirisa kwebug, iyo nyowani vhezheni inobvisa 32 kusagadzikana. Mazhinji ekusagadzikana akaonekwa semhedzisiro yekuongorora otomatiki uchishandisa KeroSanitizer, MemorySanitizer, Kudzora Flow Kutendeseka, LibFuzzer uye AFL maturusi. Hapana matambudziko akakosha akaonekwa ayo aizobvumira munhu kudarika ese mazinga ekudzivirira browser uye kuita kodhi pane system kunze kwesandbox nharaunda. Sechikamu chechirongwa chekubhadhara mibairo yemari yekuwana kusasimba kwekuburitswa kwazvino, Google yakabhadhara mibairo makumi maviri neimwe inokosha $21 (mubairo mumwe wemadhora zviuru makumi maviri, mubairo wemadhora gumi nemashanu, mibairo mina yemadhora zviuru zvishanu, mibairo mitatu yemadhora zviuru zvishanu, mibairo mitatu yemadhora zviuru zvitatu, mibairo miviri yemadhora chiuru nemazana maviri. $92000). Hukuru hwemibairo ye20000 haisati yazivikanwa.

Source: opennet.ru

Voeg