Free Software Foundation e hlahisitse morero oa JShelter, o hlahisang kenyelletso ea sebatli ho itšireletsa khahlanong le litšokelo tse hlahang ha u sebelisa JavaScript liwebsaeteng, ho kenyelletsa le boitsebahatso bo patiloeng, metsamao ea ho latela le ho bokella lintlha tsa mosebelisi. Khoutu ea projeke e ajoa tlasa laesense ea GPLv3. Keketso e lokiselitsoe Firefox, Google Chrome, Opera, Brave, Microsoft Edge le libatli tse ling tse ipapisitseng le enjene ea Chromium.
Morero ona o ntse o ntlafatsoa e le boikitlaetso bo kopanetsoeng bo tšehelitsoeng ka lichelete ke NLnet Foundation. Giorgio Maone, moetsi oa tlatsetso ea NoScript, hammoho le bathehi ba morero oa J++ le bangoli ba li-add-on tsa JS-Shield le JavaScript Restrictor, le bona ba ile ba ikopanya le nts'etsopele ea JShelter. Keketso ea JavaScript Restrictor e sebelisoa e le motheo oa morero o mocha.
JShelter e ka nkoa e le mofuta oa firewall bakeng sa li-interface tsa JavaScript tse fumanehang liwebsaeteng le lits'ebetsong tsa marang-rang. Tlatsetso e fana ka maemo a mane a ts'ireletso, hammoho le mokhoa o feto-fetohang oa tlhophiso bakeng sa ho fihlella API. Boemo ba zero bo lumella ka ho feletseng ho fumana li-API tsohle, ea pele e kenyelletsa thibelo e fokolang e sa sitiseng ts'ebetso ea maqephe, tekanyo ea bobeli ea tekanyo pakeng tsa ho thibela le ho lumellana, 'me boemo ba bone bo kenyelletsa ho thibela ka thata ntho e' ngoe le e 'ngoe e sa hlokahaleng.
Litlhophiso tsa ho thibela API li ka hokahanngoa le liwebsaete ka bomong, mohlala, ts'ireletso e ka matlafatsoa bakeng sa libaka tse ling, 'me ea holofatsoa ho tse ling. U ka boela ua khetha ho thibela mekhoa e itseng ea JavaScript, lintho, thepa le mesebetsi, kapa u fetole boleng ba ho khutlisa (mohlala, hlahisa tlhahisoleseling e fosahetseng ka sistimi). Karolo e arohaneng ke mokhoa oa NBS (Network boundary shield), o sa lumelleng maqephe ho sebelisa sebatli e le moemeli lipakeng tsa marang-rang a kantle le a lehae (likopo tsohle tse tsoang lia amoheloa le ho hlahlojoa).
Li-API tse thibetsoeng kapa tse thibetsoeng:
- fensetere.Date, window.performance.now(), window.PerformanceEntry, Event.prototype.timeStamp, Gamepad.prototype.timestamp le VRFrameData.prototype.timestamp - nako e nepahetseng e ka sebediswa ho hlwaya le ho etsa ditlhaselo tse ka thoko. .
- HTMLCanvasElement (canvas.toDataURL(), canvas.toBlob(), CanvasRenderingContext2D.getImageData, OffscreenCanvas.convertToBlob()) - e sebedisetswang ho tseba dikarolo tsa tsamaiso ya dikerafike ha ho hlwaya mosebedisi.
- Audiobuffer le Analysernode (Audiobuffer.getChanneldata (), Audiobuffer.copyfromchannel (), analysernode.getBytimedomaindata (), analySernode.getfloatTimedoma Indata (), analysernode.getbytefrequencydata () and analysernode.getfloatfrequency) signal ident () tlhaloso ea molumo.
- WebGLRenderingContext - boitsebahatso ka tlhahlobo ea likarolo tsa setaki sa litšoantšo le GPU.
- MediaDevices.prototype.enumerateDevices - boitsebiso ka ho fumana liparamente le mabitso a khamera le microphone.
- navigator.deviceMemory, navigator.hardwareConcurrency - ho fumana tlhahisoleseding mabapi le hardware.
- XMLHttpRequest (XHR) - e fetisetsa boitsebiso bo bokeletsoeng ba tsamaiso ho seva sa ka ntle ka mor'a hore leqephe le behoe.
- ArrayBuffer - ho etsa litlhaselo tse nyane tsa Specter.
- WebWorker (fensetere.Worker), SharedArrayBuffer (fensetere.SharedArrayBuffer) - ho etsa litlhaselo tse hlahlobang tieho ha u fumana data.
- Geolocation API (navigator.geolocation) - phihlello ea tlhahisoleseling ea sebaka (keketso e u lumella ho sotha data e khutlisitsoeng).
- Gamepad API (navigator.getGamepads()) ke e 'ngoe ea matšoao a boitsebahatso a nahanang ka boteng ba papali ea papali tsamaisong.
- Virtual Reality API, Mixed Reality API - ts'ebeliso ea lisebelisoa tsa 'nete tsa nnete bakeng sa boitsebahatso.
- fensetere.name - ho lutla ha libaka tse fapaneng.
- navigator.sendBeacon - e sebelisetsoang tlhahlobo ea marang-rang.
Source: opennet.ru