Siideynta nginx 1.19.3 iyo njs 0.4.4

La sameeyay kor u sii daynta nginx 1.19.3, kaas oo horumarinta awoodaha cusub ay sii socoto (marka la barbar dhigo xasilloonida la taageeray laanta 1.18 Kaliya isbeddellada la xiriira ciribtirka khaladaadka halista ah iyo baylahda ayaa la sameeyaa).

Main isbedel:

  • moduleka ayaa lagu daray ngx_stream_set_module, kaas oo kuu ogolaanaya inaad ku meelayso qiime doorsoomayaasha

    server {
    dhageyso 12345;
    dhigay $ run 1;
    }

  • Dardaaranka lagu daray calanka_cookie_proxy si aad u qeexdo calamada Kukiyada ee isku xirka wakiillada. Tusaale ahaan, in lagu daro calanka “httponly” Kukiga “hal”, iyo calamada “nosecure” iyo “samesite=strict” ee dhammaan Kukiyada kale, waxaad isticmaali kartaa dhismaha soo socda:

    proxy_cookie_flags hal http kaliya;
    proxy_cookie_flags ~ nosecure samesite= adag;

  • Dardaaran la mid ah userid_calanka ku darista calamada Kukiyada sidoo kale waxaa loo hirgeliyay moduleka ngx_http_userid.

Isla mar ahaantaana dhacay sii daayo njs 0.4.4, Turjumaan JavaScript u ah server-ka shabakada nginx. Turjubaanka njs wuxuu fuliyaa heerarka ECMAScript wuxuuna kuu ogolaanayaa inaad balaadhiso awooda nginx si ay u socodsiiso codsiyada adoo isticmaalaya qoraalada qaabaynta. Qoraallada waxaa loo isticmaali karaa faylka qaabeynta si loo qeexo macquulka horumarsan ee habaynta codsiyada, soo saarista qaabaynta, soo saarida firfircoonida jawaab celinta, wax ka beddelka codsi/jawaab, ama si degdeg ah loo abuuro stubs si loo xalliyo mashaakilaadka codsiyada webka. Nooca cusub:

  • Taageerada lagu daray ee kala soocida muuqaalka ee tirooyinka (tusaale, "1_000").
  • Hababka maqan ee %TypedArray%% nooca: kasta(), filter(), find(), findIndex(), forEach(), ka mid ah (), indexOf(), lastIndexOf(), map(), dhimin(), reduceRight(), gadaal(), qaar().
  • Habab maqan oo la fuliyay %TypedArray%: from(), of().
  • Shayga DataView ee la hirgaliyay.

    : >> (DataView cusub (buf.buffer)).getUint16()
    : 32974

  • Shayga Buffer ee la hirgaliyay.

    : >> var buf = Buffer. ka ([0x80,206,177,206,178])
    : aan la qeexin
    : >> buf.slice (1).toString()
    : 'αβ'
    >> buf.toString ('base64')
    : 'gM6xzrI='

  • Taageerada shayga Buffer ee lagu daray hababka "crypto" iyo "fs", waxayna hubisay in fs.readFile(), Hash.prototype.digest() iyo Hmac.prototype.digest() ay soo celiyeen tusaale shayga Buffer.
  • Taageerada ArrayBuffer ayaa lagu daray habka TextDecoder.prototype.decode().

Source: opennet.ru

Add a comment