Google e senotse ho lokolloa ha sebatli sa marang-rang sa Chrome 107. Ka nako e ts'oanang, tokollo e tsitsitseng ea morero oa mahala oa Chromium, e leng motheo oa Chrome, o fumaneha. Sebatli sa Chrome se fapane le Chromium ts'ebelisong ea li-logos tsa Google, boteng ba sistimi ea ho romella litsebiso haeba ho ka senyeha, li-module tsa ho bapala litaba tsa video tse sirelelitsoeng ka khopi (DRM), sistimi ea ntlafatso ea othomathiki, ho kenyeletsoa khafetsa ha Sandbox e itšehla thajana. , phepelo ea linotlolo ho Google API le phetiso ha u batla RLZ- parameters. Bakeng sa ba hlokang nako e eketsehileng ea ho ntlafatsa, lekala la Extended Stable le tšehetsoa ka thoko, le lateloa ke libeke tse 8. Phatlalatso e latelang ea Chrome 108 e reriloe ka la 29 Pulungoana.
Liphetoho tsa bohlokoa ho Chrome 107:
- Ts'ehetso e ekelitsoeng bakeng sa mochini oa ECH (Encrypted Client Hello), e tsoelang pele nts'etsopele ea ESNI (Encrypted Server Name Indication) mme e sebelisetsoa ho notlela tlhahisoleseling mabapi le li-parameter tsa nako ea TLS, joalo ka lebitso la domain le kopiloeng. Phapang e ka sehloohong pakeng tsa ECH le ESNI ke hore ho ECH, ho e-na le ho ngoloa boemong ba masimo a motho ka mong, molaetsa oohle oa TLS ClientHello o ngotsoe, o u lumellang ho thibela ho lutla ka masimo a sa koaheloang ke ESNI, mohlala, PSK. (Pre-Shared Key) lebala. ECH e boetse e sebelisa rekoto ea HTTPSSVC DNS sebakeng sa rekoto ea TXT ho fetisa tlhahisoleseling ea senotlolo sa sechaba, 'me e sebelisa encryption e netefalitsoeng ea pheletso ho isa pheletsong e ipapisitseng le mochini oa Hybrid Public Key Encryption (HPKE) ho fumana le ho patala senotlolo. Ho laola hore na ECH e lumelletsoe, "chrome://flags#encrypted-client-hello" e ea khothaletsoa.
- Tšehetso e nolofalitsoeng bakeng sa hardware e potlakisang ho decoding ea video ka mokhoa oa H.265 (HEVC).
- Mokhahlelo oa bohlano oa ho fokotsa tlhahisoleseding ho sehlooho sa HTTP sa Moemeli-Moemeli le li-parameter tsa JavaScript navigator.userAgent, navigator.appVersion, le navigator.platform e lumelletsoe ho fokotsa tlhahisoleseding e ka sebelisoang ho khetholla mosebedisi. Ho Chrome 107, mohala oa moemeli oa mosebelisi o fokotsehile ka litaba tsa sethala le processor bakeng sa basebelisi ba komporo, 'me litaba tsa navigator.platform JavaScript parameter li hatselitsoe. Phetoho e bonahala feela liphetolelong tsa sethala sa Windows, seo mofuta o ikhethileng oa sethala se fetotsoeng ho "Windows NT 10.0". Ho Linux, litaba tsa sethala ho Moemeli-Mosebelisi ha lia fetoha.
Nakong e fetileng, linomoro tsa MINOR.BUILD.PATCH tse entseng mofuta oa sebatli li nketsoe sebaka ke 0.0.0. Ho ea pele, hlooho e tla ba le tlhahisoleseling feela mabapi le lebitso la sebatli, mofuta o moholo oa sebatli, sethala le mofuta oa sesebelisoa (mohala oa mohala, PC, tablet). Bakeng sa lintlha tse ling, joalo ka mofuta o nepahetseng le data e atolositsoeng ea sethala, o tlameha ho sebelisa Litlhahiso tsa Moemeli oa Basebelisi API. Bakeng sa liwebsaete tse se nang lintlha tse ncha tse lekaneng 'me ha li so itokisetse ho fetohela ho Litlhahiso tsa Bareki ba Basebelisi, ho fihlela ka Mots'eanong 2023, monyetla oa ho khutlisa Moemeli oa Mosebelisi ka botlalo o fanoe.
- Mofuta oa Android ha o sa tšehetsa sethala sa Android 6.0, sebatli hona joale se hloka bonyane Android 7.0.
- Fetola moralo oa sebopeho bakeng sa ho latedisa boemo ba download. Sebakeng sa ntlha e ka tlase e nang le data mabapi le tsoelo-pele ea ho jarolla, letšoao le lecha le kentsoe phanele e nang le bar ea aterese, ha e tobetse, tsoelo-pele ea ho jarolla lifaele le nalane e nang le lenane la lifaele tse seng li jarollotsoe li bonts'oa. Ho fapana le bareng e ka tlase, konopo e bonts'oa ka ho sa feleng bareng mme e o lumella ho fihlella nalane ea hau ea download kapele. Khokahano e ncha ho fihlela joale e fanoe ke basebelisi ba bang feela mme e tla fetisetsoa ho bohle haeba ho se na mathata.
- Bakeng sa basebelisi ba komporo, bokhoni ba ho kenya li-password tse bolokiloeng faeleng ka sebopeho sa CSV bo fanoe. Nakong e fetileng, li-password tse tsoang faeleng ho ea ho sebatli li ne li ka fetisoa feela ka password.google.com service, empa joale e ka etsoa ka molaoli oa password o kentsoeng ho sebatli (Google Password Manager).
- Kamora hore mosebelisi a thehe profaele e ncha, ho fanoa ka molaetsa o u khothaletsang hore u lumelle ho hokahanya 'me u ee ho litlhophiso tseo ka tsona u ka fetolang lebitso la profil ebe u khetha sehlooho sa mebala.
- Mofuta oa sethala sa Android o fana ka sebopeho se secha sa ho khetha lifaele tsa media bakeng sa ho kenya linepe le livideo (ho e-na le ts'ebetsong ea eona, ho sebelisoa sebopeho se tloaelehileng sa Android Media Picker).
- E lumelletse ho hlakoloa ha tumello ea ho hlahisa litsebiso bakeng sa libaka tse tšoaroang li romella litsebiso le melaetsa e sitisang mosebedisi. Ho feta moo, bakeng sa libaka tse joalo, likopo tsa ho fumana tumello ea ho romela litsebiso li emisitsoe.
- Ho kenyellelitsoe thepa e ncha ho Screen Capture API e amanang le ho arolelana skrini - selfBrowserSurface (eu lumella ho qhelela ka thoko tab ea hajoale ha u letsetsa getDisplayMedia()), surfaceSwitching (e u lumella ho pata konopo ho chencha li-tab), le displaySurface (eu lumella ho thibela ho arolelana ho tab, fensetere, kapa skrineng).
- E kentse thepa ea renderBlockingStatus ho Performance API ho supa lisebelisoa tse etsang hore phetiso ea maqephe e emisoe ho fihlela e qeta ho bula.
- Li-API tse 'maloa tse ncha li kentsoe mokhoa oa liteko tsa Origin (likarolo tsa liteko tse hlokang ts'ebetso e arohaneng). Teko ea Origin e bolela bokhoni ba ho sebetsa le API e boletsoeng ho tsoa lits'ebetsong tse jarollotsoeng ho tsoa ho localhost kapa 127.0.0.1, kapa ka mor'a ho ngolisa le ho amohela token e khethehileng e sebetsang ka nako e lekanyelitsoeng bakeng sa sebaka se itseng.
- Phatlalatso ea PendingBeacon API e u lumellang ho laola ho romella data e sa hlokeng karabo (beacon) ho seva. API e ncha e u lumella ho fana ka ho romella data e joalo ho sebatli, ntle le tlhoko ea ho letsetsa ts'ebetso ea ho romella ka nako e itseng, mohlala, ho hlophisa phetiso ea telemetry kamora hore mosebelisi a koale leqephe.
- The Permissions-Policy (Feature Policy) Hlooho ea HTTP, e sebelisetsoang ho fana ka tumello le ho nolofalletsa likarolo tse tsoetseng pele, hona joale e tšehetsa boleng ba "download", bo ka sebelisoang ho thibela "download" ba sebetsanang le ketsahalo leqepheng.
- Ho kenya e ekelitse tšehetso bakeng sa tšobotsi ea "rel", e u lumellang hore u sebelise "rel=noreferrer" parameter ho tsamaea ka mefuta ea marang-rang ho thibela phetiso ea sehlooho sa Referer kapa "rel=noopener" ho thibela ho seta thepa ea Window.opener le ho hana. ho fihlella moelelo oa taba eo phetoho e entsoeng ho eona .
- CSS Grid e eketsa ts'ehetso bakeng sa ho kopanya likholomo tsa grid-template le thepa ea mela ea grid-template ho fana ka phetoho e bonolo lipakeng tsa linaha tse fapaneng tsa grid.
- Lintlafatso li entsoe ho lisebelisoa bakeng sa baetsi ba marang-rang. E ekelitse bokhoni ba ho etsa li-hotkeys. Tlhahlobo e ntlafalitsoeng ea memori ea lintho tsa ts'ebeliso ea C/C++ tse fetoletsoeng ho sebopeho sa WebAssembly.
Ntle le boqapi le litokiso tsa liphoso, bofokoli ba 14 bo lokisitsoe mofuteng o mocha. Bofokoli bo bongata bo ile ba bonoa ka lebaka la lisebelisoa tsa tlhahlobo tse ikemetseng AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer le AFL. Ha ho litaba tse mahlonoko tse lumellang ho feta maemo ohle a ts'ireletso ea sebatli le khoutu ea ts'ebetso ka har'a sistimi e kantle ho tikoloho ea sandbox e khethiloeng. E le karolo ea lenaneo la bounerability bakeng sa tokollo ea hajoale, Google e lefile likhau tse 10 tse jang $57 (e le 'ngoe ea $20000, $17000, le $7000, likhau tse peli tsa $3000, likhau tse tharo tsa $2000, le moputso o le mong oa $1000). Chelete ea moputso o le mong ha e so tsejoe.
Source: opennet.ru