Chrome kuburitswa 92

Google yakazarura kusunungurwa kwewebhu Chrome 92. Panguva imwecheteyo, kusunungurwa kwakagadzikana kweprojekti yakasununguka yeChromium, iyo inoshanda sehwaro hweChrome, inowanikwa. Iyo Chrome browser inosiyaniswa nekushandiswa kweGoogle logos, kuvapo kweiyo system yekutumira zviziviso kana yaparara, mamodule ekutamba akachengetedzwa vhidhiyo yemukati (DRM), sisitimu yekuisa otomatiki zvigadziriso, uye kutumira RLZ paramita paunenge uchitsvaga. Kuburitswa kunotevera kweChrome 93 kwakarongerwa Nyamavhuvhu 31st.

Kuchinja kukuru muChrome 92:

• Zvishandiso zvakawedzerwa kune zvigadziriso kudzora kubatanidzwa kweChakavanzika Sandbox zvikamu. Mushandisi anopiwa mukana wekudzima tekinoroji yeFLoC (Federated Learning of Cohorts), iyo iri kuvandudzwa neGoogle kutsiva maCookies ekufamba-famba ne "cohorts" inobvumira vashandisi kuti vaonekwe vane zvido zvakafanana pasina kuzivisa vanhu. Cohorts anoverengerwa padivi rebrowser nekushandisa muchina kudzidza algorithms kubhurawuza nhoroondo data uye zvirimo zvinovhurwa mubrowser.
• Kune vashandisi vepadesktop, iyo Kumashure-kumberi cache inogoneswa nekusarudzika, ichipa kufamba nekukurumidza paunenge uchishandisa Kumashure uye Kumberi mabhatani kana pakufamba nemapeji aimboonekwa esaiti iripo. Pakutanga, iyo yekusvetuka cache yaingowanikwa mukuvaka kweiyo Android chikuva.
• Kuwedzera kuparadzaniswa kwemasaiti uye ma-add-ons mumatanho akasiyana. Kana kare iyo Saiti Isolation nzira yakavimbisa kuparadzaniswa kwemasaiti kubva kune imwe neimwe munzira dzakasiyana, uye zvakare yakapatsanura ese ma-add-ons mune yakaparadzana maitiro, saka kuburitswa kutsva kunoshandisa kupatsanurwa kwebrowser-add-ons kubva kune mumwe nekufambisa imwe neimwe yekuwedzera- kupinda mune imwe nzira yakasiyana, iyo yakaita kuti zvikwanisike kugadzira chimwe chipingamupinyi chekudzivirirwa kubva kune zvakashata zvinowedzera.
• Zvakanyanya kuwedzera kugadzirwa uye kugona kwekuonekwa kwe phishing. Iko kumhanya kwekuona phishing zvichienderana nekuongororwa kwemifananidzo yemunharaunda kwakawedzera kusvika ka50 muhafu yemakesi, uye mu99% yezviitiko zvakazoitika kanenge ka2.5 nekukurumidza. Paavhareji, nguva yekuisa phishing nemufananidzo yakadzikira kubva pamasekonzi 1.8 kusvika pa100 ms. Pakazere, iyo CPU mutoro wakagadzirwa neese maitiro ekupa wakadzikira ne1.2.
• Ports 989 (ftps-data) uye 990 (ftps) akawedzerwa kune rondedzero yeakarambidzwa network ports. Kare, ports 69, 137, 161, 554, 1719, 1720, 1723, 5060, 5061, 6566 uye 10080 dzanga dzakatovharwa. Kune zviteshi pane blacklist, kutumira HTTP, HTTPS uye FTP zvikumbiro kunovharirwa kubva kuNAT kuitira kudzivirira. slipstreaming attack, iyo inobvumira kana uchivhura peji rewebhu rakanyatsogadzirirwa neanorwisa mubrowser, gadzira network yekubatanidza kubva kune anorwisa server kune chero UDP kana TCP port pane mushandisi sisitimu, kunyangwe kushandiswa kwemukati kero renji (192.168.xx , 10.xxx).
• Chinodiwa chakaunzwa kushandisa maviri-chinhu chekuvandudza dhizaini paunenge uchiburitsa mitsva yekuwedzera kana shanduro yekuvandudza kuChrome Web Store.
• Izvozvi zvinogoneka kudzima ma-add-on akaiswa mubrowser kana abviswa kubva kuChrome Web Store nekuda kwekutyorwa kwemitemo.
• Pakutumira mibvunzo yeDNS, kana iri kushandisa dhizaini DNS maseva, kuwedzera kune "A" uye "AAAA" marekodhi ekuona IP kero, iyo "HTTPS" DNS rekodhi ikozvino yakumbirwa, kuburikidza iyo paramita inopfuudzwa kuti ikurumidze. kumisikidzwa kweHTTPS yekubatanidza, senge protocol marongero, TLS ClientHello encryption kiyi, uye rondedzero yealias subdomain.
• Kufonera maJavaScript dialogs window.alert, window.confirm and window.prompt hazvibvumidzwe kubva kumabhuroko eiframe akatakurwa kubva kune dzimwe nzvimbo kunze kwedomeini yepeji iripo. Shanduko iyi ichabatsira kuchengetedza vashandisi kubva mukushungurudzwa kwakabatana nekuyedza kuratidza yechitatu-bato chiziviso sechikumbiro kubva kunzvimbo huru.
• Iyo nyowani tebhu peji inopa runyorwa rweanonyanya kufarirwa magwaro akachengetwa muGoogle Drive.
• Zvinogoneka kushandura zita uye icon yePWA (Progressive Web Apps) application.
• Kune diki diki nhamba yemafomu ewebhu anoda kuti uise kero kana nhamba yekadhi rechikwereti, kurudziro yekuzadza otomatiki ichadzimwa seyedzo.
• Mushanduro yedesktop, sarudzo yekutsvaga mufananidzo (iyo "Tsvaga Mufananidzo" chinhu chiri mumenu yemamiriro ekunze) yakachinjirwa kuti ishandise sevhisi yeGoogle Lens panzvimbo peyakajairwa Google yekutsvaga injini. Paunodzvanya bhatani rinoenderana mune yemukati menyu, mushandisi anozoendeswa kune yakaparadzana webhu application.
• Mune incognito mode interface, zvinongedzo kunhoroondo yekubhurawuza zvakavanzwa (zvisungo hazvina maturo, sezvo zvakatungamira pakuvhurwa kwestub ine ruzivo rwekuti nhoroondo haina kuunganidzwa).
• Yakawedzera mirairo mitsva inopatsanurwa kana yaiswa mubhawa rekero. Semuenzaniso, kuratidza bhatani rekukurumidza kuenda kupeji yekutarisa kuchengetedzwa kwemapassword uye ma-add-ons, ingo nyora "cheki yekuchengetedza", uye kuti uende kune chengetedzo uye kuwiriranisa marongero, ingo nyora "maneja chengetedzo marongero" uye " gadzirisa sync".
• Shanduko dzakanangana mu Android vhezheni yeChrome:
  • Iyo pani ine bhatani idzva rinogona kugadzirika re "Magic Toolbar" rinoratidza nzira dzekudimbudzira dzakasiyana dzakasarudzwa zvichienderana nezviri kuitwa nemushandisi uye rinosanganisira zvinongedzo zvingangodiwa izvozvi.
  • Kuitwa kweiyo-pa-mudziyo muchina wekudzidza modhi yekuona kuedza kwephishing yakagadziridzwa. Kana kuedza kwekubira kunoonekwa, pamusoro pekuratidza peji yambiro, browser ikozvino ichatumira ruzivo nezve vhezheni yemuchina wekudzidza modhi, huremu hwakaverengerwa hwechikamu chimwe nechimwe, uye mureza wekushandisa iyo modhi nyowani kune yekunze Safe Browsing sevhisi. .
  • Yakabviswa marongero e "Ratidza mazano emapeji akafanana kana peji isingawanikwe", izvo zvaita kuti mapeji akafanana arumbidzwe zvichienderana nekutumira mubvunzo kuGoogle kana peji racho rikasawanikwa. Setting iyi yakabviswa kare kubva mudesktop version.
  • Iko kushandiswa kwesaiti yekuzviparadzanisa modhi kune yega maitiro kwakawedzerwa. Nezvikonzero zvekushandisa zviwanikwa, nzvimbo dzakakura dzakasarudzwa chete kusvika parizvino dzakatamiswa kuti dziparadzanise maitiro. Mushanduro itsva, kuzviparadzanisa kuchatangawo kushanda kumasaiti ayo mushandisi akapinzwa mukati aine huchokwadi kuburikidza neOAuth (semuenzaniso, kubatanidza kuburikidza neGoogle account) kana iyo inoseta Cross-Origin-Opener-Policy HTTP musoro. Kune avo vanoda kugonesa kuzviparadzanisa nevamwe mumasaiti ese, iyo "chrome://flags/#enable-site-per-process" inopihwa.
  • Injini yeV8 yakavakirwa-mukati nzira dzekudzivirira kubva padivi-chiteshi kurwiswa seSpecter akaremara, ayo asingatariswe seanoshanda sekuparadzanisa masaiti mumatanho akasiyana. Mushanduro yedesktop, nzira idzi dzakaremara kumashure mukuburitswa kweChrome 70.
  • Kuwanikwa kuri nyore kune zvigadziriso zvemvumo dzesaiti, senge maikorofoni, kamera, uye kuwana nzvimbo. Kuti uratidze runyoro rwemvumo, ingodzvanya padlock chiratidzo mubhawa rekero, wobva wasarudza chikamu che "Mvumo".
• MaAPI matsva akati wandei akawedzerwa kune Origin Miyedzo modhi (yekuyedza maficha anoda kupatsanurwa activation). Origin Trial inoreva kugona kushanda neiyo API yakatarwa kubva kune yakatorwa kubva kune localhost kana 127.0.0.1, kana mushure mekunyoresa uye kugamuchira yakakosha tokeni iyo inoshanda kwenguva shoma kune yakatarwa saiti.
  • API Faira Kubata, iyo inokutendera iwe kunyoresa webhu zvikumbiro semafaira ekubata. Semuenzaniso, web application inoshanda muPWA (Progressive Web Apps) mode ine text editor inogona kuzvinyoresa se ".txt" file handler, mushure mezvo inogona kushandiswa muhurongwa hwemafaira ekuzarura mafaira ezvinyorwa.
  • Yakagoverwa Element Transitions API, iyo inokutendera iwe kuti ushandise yakagadzirira-yakagadzirwa mhedzisiro yakapihwa nebrowser iyo inofungidzira shanduko yemamiriro eiyo interface mune imwechete-peji (SPA, single-peji maapplication) uye akawanda-mapeji (MPA, akawanda-mapeji maapplication. ) web applications.
• Iyo saizi-inogadzirisa paramende yakawedzerwa kune @font-chiso CSS mutemo, iyo inokutendera iwe kuyera glyph saizi kune yakatarwa font maitiro pasina kushandura kukosha kweiyo font-saizi CSS pfuma (nzvimbo iri pasi pechimiro inoramba yakafanana. , asi saizi yeglyph munzvimbo ino inoshanduka).
• MuJavaScript, iyo Array, String, uye TypedArray zvinhu zvinoshandisa iyo () nzira, iyo inobvumidza iwe kushandisa hukama indexing (chinzvimbo chehukama chinotsanangurwa seiyo array index), kusanganisira kutsanangura maitiro asina kunaka ane hukama nemagumo (semuenzaniso, "arr.at(-1)" ichadzosa chikamu chekupedzisira chehurongwa).
• The dayPeriod property yakawedzerwa kune Intl.DateTimeFormat JavaScript constructor, iyo inokubvumira kuti uratidze nguva inenge yezuva (mangwanani, manheru, masikati, usiku).
• Paunenge uchishandisa SharedArrayBuffers zvinhu, izvo zvinokutendera iwe kuti ugadzire arrays mune yakagovaniswa ndangariro, iwe zvino unofanirwa kutsanangura iyo Cross-Origin-Opener-Policy uye Cross-Origin-Embedder-Policy HTTP misoro, pasina icho chikumbiro chichavharwa.
• Iyo "togglemicrophone", "togglecamera" uye "hangup" zviito zvakawedzerwa kuMedia Session API, zvichibvumira masayiti anoshandisa vhidhiyo musangano musangano kuti abatanidze ivo vanobata avo kune mbeveve / kunyarara, kamera kudzima / on uye ekupedzisira mabhatani anoratidzwa mu mufananidzo-mu-pikicha interface kufona.
• Iyo Webhu Bluetooth API yakawedzera kugona kusefa yakawanikwa maBluetooth zvishandiso nemugadziri uye zvigadzirwa zvinozivisa. Iyo sefa inoiswa kuburikidza ne "options.filters" parameter muBluetooth.requestDevice () nzira.
• Danho rekutanga rekucheka zviri mukati meMushandisi-Mumiririri weHTTP musoro waitwa: iyo DevTools Issues tab yava kuratidza yambiro nezvekudzikira kwenavigator.userAgent, navigator.appVersion uye navigator.platform.
• Chikamu chekuvandudza chakaitwa kune zvishandiso zvevagadziri vewebhu. Iyo webhu console inopa kugona kutsanangurazve "const" mataurirwo. Muchikamu cheElements, iframe zvinhu zvinokwanisa kukurumidza kuona ruzivo kuburikidza nemenu yemamiriro ezvinhu inoonekwa paunodzvanya-kurudyi pane chinhu. Kuvandudzwa kwekugadzirisa kweCORS (Cross-origin resource sharing) kukanganisa. Iko kugona kusefa zvikumbiro zvetiweki kubva kuWebAssembly kwakawedzerwa kune network chiitiko chekuongorora pani. A CSS Grid mupepeti mutsva akakurudzirwa ("ratidza: grid" uye "ratidza: inline-grid") ine basa rekutarisa shanduko.

Pamusoro pehunyanzvi uye kugadzirisa kwebug, iyo nyowani vhezheni inobvisa 35 kusagadzikana. Mazhinji ekusagadzikana akaonekwa semhedzisiro yekuongorora otomatiki uchishandisa KeroSanitizer, MemorySanitizer, Kudzora Flow Kutendeseka, LibFuzzer uye AFL maturusi. Hapana matambudziko akakosha akaonekwa ayo aizobvumira munhu kudarika ese mazinga ekudzivirira browser uye kuita kodhi pane system kunze kwesandbox nharaunda. Sechikamu chechirongwa chekubhadhara mibairo yemari yekuwana kusasimba kwekuburitswa kwazvino, Google yakabhadhara mibairo makumi maviri nemana inokosha $24 (mbiri $112000 mibairo, mana $15000 mibairo, imwe $10000 mubairo, mbiri $8500 mibairo, matatu $7500 mibairo, imwe $5000 $3000, ) Hukuru hwemibairo gumi neimwe haisati yazivikanwa.

Source: opennet.ru