Firefox 147 kuburitswa

Firefox 147 yaburitswa, pamwe chete nekuvandudzwa kwematavi ekutsigira ekare—140.7.0 ne115.32.0. Firefox 148 yapinda mukuyedzwa kwebeta, uye kuburitswa kwakarongerwa Kukadzi 24.

Akakosha maficha matsva muFirefox 147 (1, 2, 3):

• Rutsigiro rwakawedzerwa rweFreedesktop.org XDG Base Directory specification uye kugona kushandisa dhairekitori re "~/.config/mozilla" kuchengetedza maprofiles, ma add-ons, ma settings, uye ma database emukati. Rutsigiro rwekuchengetedza data mudhairekitori rekare re "~/.mozilla" rinochengetwa sesarudzo, rinoitwa kana richishandiswa ne "MOZ_LEGACY_HOME=1" environment variable.
• Rutsigiro rwakawedzerwa rweCompression Dictionary Transport mechanism (RFC 9842), iyo inobvumira kuderedza saizi yedata rinotamiswa pakati pemutengi ne server, uchishandisa maalgorithms ekudzvanya eZstandard (Content-Encoding: dcz) uye Brotli (Content-Encoding: dcb) pamwe chete nekudzvanya kwakavakirwa paduramazwi kwemaumbirwo akajairwa. Pane mamiriro maviri anowanikwa ekushandisa Compression Dictionary Transport: kudzvanya zviri mukati uchishandisa maduramazwi akatumirwa kare neseva uye kushandisa zviri mukati zvakatumirwa kare seduramazwi rekudzvanya vhezheni itsva (delta compression, umo shanduko chete kana tichienzanisa nevhezheni iripo dzinotumirwa).

  Semuenzaniso, nechikumbiro chekuti "GET /index.html," sevha inogona kuendesa ruzivo nezvekuvapo kweduramazwi nekudzorera nzira yaro mumusoro wenyaya 'Link: <…/dict>; rel="compression-dictionary"'. Kana mutengi aisa duramazwi mu "…/dict," sevha ichapa ruzivo nezvekushandiswa kwaro mumafaira eHTML nekuisa musoro wenyaya 'Use-As-Dictionary: match="/*html"'. Nechikumbiro chinotevera cheHTML resource, semuenzaniso, "GET /index2.html," mutengi acharatidza ruzivo nezvekuvapo kweduramazwi kuburikidza nemusoro wenyaya 'Available-Dictionary: dictionary_hash"'. Kana sevha iine duramazwi rine hash yakapihwa, ichadzosera zviri mu index2.html, yakamanikidzwa uchishandisa duramazwi iri.

  Kuti delta-compress shanduro dzakasiyana dzemafaira eJavaScript, sevha inogona kupindura chikumbiro che "GET /app.v1.js" nemusoro we'Use-As-Dictionary: match="/app*js"', zvichiratidza kuti zviri mukati zvakadzoserwa zvinogona kushandiswa seduramazwi renzira "/app*js." Pakukumbira faira rinoenderana nemasiki aya, semuenzaniso, "GET /app.v2.js," mutengi achapfuura hash yeduramazwi riripo kuburikidza nemusoro we "Available-Dictionary:", uye sevha ichadzosera shanduko dziri pakati pemafaira e app.v1.js ne app.v2.js chete.

• Peji re about:keyboard rakawedzerwa kuti rigadzirise mapfupi ekhibhodi uye kutsanangura patsva ma hotkeys aripo, semuenzaniso, kuti pave nesarudzo dzinozivikanwa kana kudzivirira kusawirirana nemamwe mapurogiramu.
• Kutamba kwemavhidhiyo kwakagadziridzwa uchishandisa hardware-accelerated decoding paAMD GPUs. Pamasystem ane AMD GPUs, mavhidhiyo ane hardware-decode ikozvino anotamba pasina kukopa data (zero-copy mode), sezvakamboitwa kumasystem ane Intel neNVIDIA GPUs.
• Shanduro yechishanu ine kushandiswa kwakagadziridzwa kweprotocol yeSafe Browsing, iyo inotarisa maURL zvichienderana nerondedzero dzeGoogle dzezvinhu zvisina kuchengetedzeka (phishing sites, malware-host pages, nezvimwewo). Shanduro itsva yeprotocol inobvumira kurodha pasi mablock lists kuti ashandiswe pane system yemuno (dhatabhesi ine SHA256 hash prefixes yemaURL ane matambudziko), ayo ikozvino ari kushandiswa muFirefox.
• Yakawedzera sarudzo yekuenderera mberi uchitamba vhidhiyo otomatiki mumufananidzo-mu-mufananidzo paunenge uchichinja ma tabo.
• MuEnhanced Tracking Protection (ETP) mode (> Strict), Local Network Access (LNA) specification inogoneswa nekukasika kuti ivhare mukana wekupinda mu local system (loopback, 127.0.0.0/8) kana internal network (192.168.0.0/16, 10.0.0.0/8, nezvimwewo) pavanenge vachishanda nemawebsite everuzhinji. Varwi vanoshandisa mukana wekupinda mu internal resources kuti vaite CSRF attacks pa routers, access points, printers, corporate web interfaces, uye mamwe ma devices nemasevhisi anogamuchira zvikumbiro kubva kune local network chete. Uyezve, scaning ye internal resources inogona kushandiswa pakuzivikanwa zvisina kunanga kana kuunganidza ruzivo nezve local network.
• PaLinux systems dzine GNOME neMutter composite server, dambudziko rine kuratidzwa kwezviri pachena pakushandisa fractional zoom levels ragadziriswa.
• Pamakombiyuta eApple ane machipisi eApple Silicon uye OS macOS Rutsigiro rweWebGPU API rwakagoneswa.
• Zvinonyanya kukosha zvekusarudza mutauro (q-parameters) zvakaiswa muAccept-Language HTTP header zvakabatana neizvo zvakaiswa nemamwe mabrowser, zvichigadzirisa mamwe matambudziko ekutakura. Semuenzaniso, mutauro wechipiri ikozvino waiswa ku q=0.9 pachinzvimbo che q=0.5, uye pamutauro wega wega unotevera, kukosha kwacho kunoderedzwa ne 0.1.
• Raibhurari yeICU yakagadziridzwa kuita vhezheni 78 ine Unicode 17 tsigiro uye yenharaunda data inogadziridza.
• Vashandi vebasa vanobvumirwa kushandisa mamodule eESM (ECMAScript Module) JavaScript, anopinzwa nekutumirwa kunze kwenyika kuburikidza ne import and export statements.
• Yakawedzera rutsigiro rweCSS Module Scripts specification, iyo inokutendera kuti ushandise JavaScript module system kupinza zviwanikwa zveCSS. Semuenzaniso: import styles kubva ku "./styles.css" ne { type: "css" };
• Mu "pseudo-element" "::marker", iyo inokutendera kuti ugadzirise maparamita enhamba nemapoinzi ekuverenga mumabhuroko. Uye , zvinotenderwa kushandisa CSS properties "counter-*" uye "quotes".
• Rutsigiro rwemhando yekudzvanya yeBrotli rwawedzerwa kuCompressionStream neDecompressionStream APIs.
• Iyo View Transitions API, inoshandiswa kugadzira animation effects pakuchinja pakati pemaDOM akasiyana, yakagadziridzwa ne "type" property ine mhando dzakasiyana dzekuchinja. CSS selector inoenderana, ":active-view-transition-type," yakawedzerwawo, pamwe chete ne document.activeViewTransition property, iyo inodzosera muenzaniso we ViewTransition object inoshanda yedokumende.
• Seti yezvivakwa zveCSS yakabatanidzwa yekudzora kuratidzwa kwezvinhu zvakasungirirwa panzvimbo yezvimwe zvinhu (CSS Anchor Positioning) pasina kushandisa JavaScript, semuenzaniso, yekubatanidza mapopovers kune zvinhu zvinoita sematurusi.
• Tsanangudzo ye "Storage Access Headers" yatoitwa, ichitsanangura musoro wekukumbira we "Sec-Fetch-Storage-Access" uye musoro wemhinduro we "Activate-Storage-Access" wekuwana makuki echitatu pasina kufonera nzira yedocument.requestStorageAccess(). Seva inogona kukumbira mukana wekusvika kumakuki kuburikidza nemusoro we "Activate-Storage-Access", uye musoro uyu uchatumirwa nemutengi kana mushandisi akambosimbisa mukana wekuchengetera makuki kuburikidza neStorage Access API.
• Chinhu cheCSS chinonzi "root-font-relative" chakagadziridzwa kuti chitsigire mayuniti ehukama rcap, rch, rex, uye ric.
• Navigation API yave kushandiswa, zvichibvumira mawebhusaiti kuti avhare mashandiro ekufamba kwemahwindo, kutanga kufamba, uye kuongorora nhoroondo yeapplication. API iyi inopa imwe nzira ye window.history uye window.location properties, yakagadzirirwa mawebhusaiti ane peji rimwe chete.
• Muzvishandiso zvekugadzira mawebhusaiti, panel yemitemo yeCSS ikozvino inotsigira kugadzirisa nekuwedzera pseudo-element selectors. Bhatani rekupinza chinhu muFirefox Profiler kuti uone saizi yacho rawedzerwa kune JSON data viewing interface. View Transitions pseudo-elements ikozvino yaratidzwa mu HTML element uye animation inspection panels. Panel yemitemo yeCSS ikozvino inoratidza @position-try rules, iyo inoshandiswa kudzora kuratidzwa kwezvinhu zvakanamirwa panzvimbo yezvimwe zvinhu (CSS Anchor Positioning).
• MuFirefox vhezheni ye Android akawedzera dziviriro kubva pakurwiswa kuburikidza nenzira dzechitatu, dzakadai seSpectre, dzaishandiswa kunzvenga nzvimbo kubva kune imwe kuenda kune imwe. Kare, dziviriro yakadaro yaingowanikwa chete muzvivakwa zvedesktop.

Kuwedzera kune zvinhu zvitsva uye kugadzirisa zvikanganiso, Firefox 147 inogadzirisa zvikanganiso makumi maviri nematatu. Zvipingamupinyi gumi izvi zvinokonzerwa nematambudziko ekugadzirisa ndangariro, akadai se buffer overflows uye kuwana ndangariro mushure mekunge yasunungurwa. Matambudziko aya anogona kukonzera kuurayiwa kwekodhi yakaipa pakuvhura mapeji akagadzirwa zvakanaka. Zvipingamupinyi zvitatu zvinobvumira sandbox isolation bypass nekuda kwekutarisa miganhu isina kunaka uye integer overflows muchikamu chemifananidzo.

Source: opennet.ru