Google e lokolitse Chrome 107, sebatli sa marang-rang. Ho lokolloa ho tsitsitseng ha morero oa Chromium o bulehileng, motheo oa Chrome, le oona o teng. Chrome e fapane le Chromium ha e sebelisa li-logos tsa Google, sistimi ea tsebiso ea ho senyeha, li-module tsa ho bapala litaba tsa video tse sirelelitsoeng (DRM), ho kenya ntlafatso ea othomathike, ho itšehla thajana ho lulang ho le teng, ho fana ka linotlolo tsa Google API, le ho feta ha liparamente tsa RLZ nakong ea lipatlisiso. Bakeng sa ba hlokang nako e eketsehileng ea ho ntlafatsa, lekala le arohaneng le Atolositsoeng le Stable le hlokomeloa ka libeke tse robeli. Phatlalatso e latelang, Chrome 108, e reriloe ka la 29 Pulungoana.
Liphetoho tsa bohlokoa ho Chrome 107:
- Tšehetso e kenyelelitsoe bakeng sa mochine oa ECH (Encrypted Client Hello), e leng phetoho ea ESNI (Encrypted Server Name Indication) 'me e sebelisetsoa ho kenyelletsa tlhahisoleseding e mabapi le li-parameter tsa TLS, tse kang lebitso la sebaka se kopiloeng. Phapang e ka sehloohong pakeng tsa ECH le ESNI ke hore ECH e pata molaetsa oohle oa ClientHello TLS ho e-na le ho pata masimo ka bomong, ho thibela ho lutla ka masimo a sa koahetsoeng ke ESNI, joalo ka tšimo ea PSK (Pre-Shared Key). ECH e boetse e sebelisa rekoto ea HTTPSSVC DNS sebakeng sa rekoto ea TXT ho fetisa lintlha tsa bohlokoa tsa sechaba le ho sebelisa encryption e netefalitsoeng ea pheletso ho isa pheletsong e thehiloeng ho HPKE (Hybrid Public Key Encryption) ho fumana le ho patala senotlolo. Litlhophiso tsa "chrome://flags#encrypted-client-hello" lia fumaneha bakeng sa ho nolofalletsa ECH.
- Tšehetso e nolofalitsoeng bakeng sa ho potlakisa hardware ea ho hlakisa video ka mokhoa oa H.265 (HEVC).
- Mokhahlelo oa bohlano oa ho fokotseha ho hlooho ea Moemeli oa HTTP le navigator.userAgent, navigator.appVersion, le navigator.platform JavaScript parameters e se e kentsoe tšebetsong. Phokotso ena e kengoa tšebetsong ho fokotsa tlhahisoleseling e ka sebelisetsoang ho tsebahatsa basebelisi feela. Ho Chrome 107, litaba tsa sethala le processor tse khoeleng ea Moemeli-Mosebelisi li fokolitsoe bakeng sa basebelisi ba komporo, 'me likahare tsa navigator.platform JavaScript parameter li hoamisitsoe. Phetoho ena e bonahala feela ho li-platform tsa Windows, moo mofuta o itseng oa sethala o nkeloe sebaka ke "Windows NT 10.0." Ho Linux, litaba tsa sethala ho khoele ea Moemeli-Mosebelisi li lula li sa fetohe.
Linomoro tse MINOR.BUILD.PATCH tseo pele li neng li kenyelletsa mofuta oa sebatli li nketsoe sebaka ke 0.0.0. Ho ea pele, hlooho e tla ba le tlhahisoleseling feela mabapi le lebitso la sebatli, mofuta o moholo oa sebatli, sethala le mofuta oa sesebelisoa (mobile, PC, tablet). Ho fumana lintlha tse eketsehileng, joalo ka mofuta o nepahetseng le tlhaiso-leseling e atolositsoeng ea sethala, sebelisa API ea Litlhahiso tsa Agent Client. Liwebsaete tse se nang tlhahisoleseling e lekaneng 'me li so itokisetse ho fetohela ho Litlhahiso tsa Bareki ba Basebelisi li na le ho fihlela ka Mots'eanong 2023 ho khutlela ho Moemeli ea felletseng oa Mosebelisi.
- Mofuta oa Android ha o sa tšehetsa sethala sa Android 6.0; sebatli hona joale se hloka bonyane Android 7.0 ho sebetsa.
- Sehokelo sa boemo ba ho jarolla se entsoe bocha. Sebakeng sa bar e tlase e bonts'ang tsoelo-pele ea ho jarolla, ho kentsoe letšoao le lecha bareng ea aterese. Ho tobetsa letšoao lena ho bonts'a tsoelo-pele ea ho jarolla le lenane la nalane la lifaele tse jarollotsoeng pele. Ho fapana le bareng e ka tlase, konopo e bonts'oa ka ho sa feleng bareng, e lumellang phihlello e potlakileng ea nalane ea download. Sehokelo se secha hajoale se fumaneha feela ka boiketsetso ho basebelisi ba bang mme se tla fetisetsoa ho basebelisi bohle haeba ho se na mathata.
- Basebelisi ba Desktop joale ba ka kenya li-password tse bolokiloeng faeleng ea CSV. Pele, li-password li ne li ka fetisoa feela ho tloha faeleng ho ea ho sebatli ka passwords.google.com, empa joale sena se ka etsoa ka molaoli oa li-password oa sebatli (Google Password Manager).
- Kamora hore mosebelisi a thehe profaele e ncha, ho hlahisoa memo e kopang ho lumella ho hokahanya le ho ea ho litlhophiso, tseo ka tsona lebitso la profil le ka fetoloang le sehlooho sa mebala se ka khethoang.
- Mofuta oa sethala sa Android o fana ka sebopeho se secha sa ho khetha lifaele tsa media bakeng sa ho kenya linepe le livideo (ho e-na le ts'ebetsong ea eona, ho sebelisoa sebopeho se tloaelehileng sa Android Media Picker).
- Hlakola tumello ea litsebiso ka bo eona bakeng sa libaka tse fumanoeng li romella litemoso le melaetsa e tenang. Ho feta moo, likopo tsa tumello bakeng sa litsebiso li emisitsoe bakeng sa libaka tse joalo.
- Screen Capture API e nchafalitsoe ka thepa e ncha e amanang le ho arolelana skrineng: selfBrowserSurface (e u lumella ho qhelela ka thoko tab ea hajoale ha u letsetsa getDisplayMedia()), surfaceSwitching (e u lumella ho pata konopo bakeng sa ho chencha li-tab), le displaySurface (e u lumella ho fokotsa ho arolelana ho tab, fensetere, kapa skrine).
- Thepa ea renderBlockingStatus e kentsoe ho Performance API ho supa lisebelisoa tse etsang hore ho emisoa ha phepelo ea maqephe ho fihlela e qeta ho khoasolla.
- Li-API tse 'maloa tse ncha li kentsoe mokhoa oa liteko tsa Origin (likarolo tsa liteko tse hlokang ts'ebetso e arohaneng). Teko ea Origin e bolela bokhoni ba ho sebetsa le API e boletsoeng ho tsoa lits'ebetsong tse jarollotsoeng ho tsoa ho localhost kapa 127.0.0.1, kapa ka mor'a ho ngolisa le ho amohela token e khethehileng e sebetsang ka nako e lekanyelitsoeng bakeng sa sebaka se itseng.
- PendingBeacon declarative API e u lumella ho laola ho romela data ho seva e sa hlokeng karabo (e bitsoang beacon). API e ncha e u lumella ho fana ka ho romella data e joalo ho sebatli, ntle le ho letsetsa ts'ebetso ea ho romella ka nako e itseng, mohlala, ho hlophisa phetisetso ea telemetry kamora hore mosebelisi a koale leqephe.
- Leano la Litumello (Leano la Tšobotsi) Sehlooho sa HTTP, se sebelisetsoang ho fana ka tumello le ho nolofalletsa likarolo tse tsoetseng pele, se nchafalitsoe ho tšehetsa boleng ba "ho laolla", bo ka sebelisoang ho thibela "ho laolla" ba sebetsanang le liketsahalo leqepheng.
- Lethekeng Tšehetso e ekelitsoeng bakeng sa tšobotsi ea "rel", e u lumellang ho sebelisa paramethara ea "rel=noreferrer" ho tsamaea ka mefuta ea marang-rang ho tima phetiso ea sehlooho sa Referer, kapa "rel=noopener" ho tima tlhophiso ea thepa ea Window.opener le ho thibela phihlello ho maemo ao phetoho e entsoeng ho ona.
- CSS Grid joale e ts'ehetsa ho kenyeletsoa ha li-columns tsa grid-template-rows le thepa ea mela ea grid-template ho fana ka phetoho e bonolo lipakeng tsa linaha tse fapaneng tsa grid.
- Lintlafatso li entsoe ho lisebelisoa tsa ho ntlafatsa marang-rang. Bokhoni ba ho iketsetsa li-hotkey bo kentsoe. Tlhahlobo ea memori ea lintho tsa kopo ea C / C ++ e fetoletsoeng ho WebAssembly e ntlafalitsoe.
Ntle le likarolo tse ncha le litokiso tsa liphoso, mofuta o mocha o sebetsana le bofokoli ba 14. Bofokoli bo bongata bo ile ba bonoa ka tlhahlobo ea othomathiki ho sebelisoa AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer, le AFL. Ha ho litaba tse mahlonoko tse ka lumellang ho feta likarolo tsohle tsa ts'ireletso ea sebatli le ho etsa khoutu ka ntle ho tikoloho ea sandbox tse ileng tsa tsejoa. E le karolo ea lenaneo la eona la bofokoli bakeng sa tokollo ea hajoale, Google e fane ka likhau tse 10 tsa kakaretso ea $57 (bounty e le 'ngoe ea $20000, $17000, le $7000; lithuso tse peli tsa $3000; lithuso tse tharo tsa $2000; le $1000 e le 'ngoe). Chelete ea bounty ka 'ngoe ha e so tsejoe.
Source: opennet.ru
