Phatlalatso ea Chrome 91

Google e senotse ho lokolloa ha sebatli sa marang-rang sa Chrome 91. Ka nako e ts'oanang, ho lokolloa ho tsitsitseng ha morero oa mahala oa Chromium, o sebetsang e le motheo oa Chrome, o fumaneha. Sebatli sa Chrome se khetholloa ka ts'ebeliso ea li-logos tsa Google, boteng ba sistimi ea ho romella litsebiso haeba ho ka ba le kotsi, li-module tsa ho bapala litaba tsa video tse sirelelitsoeng (DRM), sistimi ea ho kenya liapdeite ka bo eona, le ho fetisa liparamente tsa RLZ ha u batla. Phallo e latelang ea Chrome 92 e reriloe ka la 20 Phupu.

Liphetoho tsa bohlokoa ho Chrome 91:

• E kentse tšebetsong bokhoni ba ho emisa tšebetso ea JavaScript sehlopheng se oeleng. Chrome 85 e hlahisitse tšehetso ea ho hlophisa li-tab ka lihlopha tse ka amahanngoang le 'mala o itseng le leibole. Ha o tobetsa leibole ea sehlopha, li-tab tse amanang le eona lia putlama 'me ho sala leibole e le' ngoe sebakeng sa eona (ho tobetsa label hape ho bula sehlopha). Tokollong e ncha, molemong oa ho fokotsa mojaro oa CPU le ho boloka matla, ts'ebetso ho li-tab tse fokolang e emisitsoe. Mokhelo o etsoa feela bakeng sa li-tab tse bapalang molumo, sebelisa Web Locks kapa IndexedDB API, hokela sesebelisoa sa USB, kapa ho nka video, molumo, kapa litaba tsa fensetere. Phetoho e tla hlahisoa butle-butle, ho qala ka karolo e nyane ea basebelisi.
• E kenyelelitsoe ts'ehetso ea mokhoa oa bohlokoa oa tumellano o hanyetsanang le matla a sehlōhō holim'a lik'homphieutha tsa quantum. Lik'homphieutha tsa Quantum li potlakile haholo ho rarolla bothata ba ho senya palo ea tlhaho hore e be lintlha tse ka sehloohong, e leng motheo oa li-algorithms tsa morao-rao tsa asymmetric encryption 'me li ke ke tsa rarolloa ka katleho ho li-processor tsa khale. Bakeng sa tšebeliso ho TLSv1.3, ho fanoe ka plugin ea CECPQ2 (Combined Elliptic-Curve le Post-Quantum 2), e kopanyang mokhoa oa khale oa phapanyetsano oa X25519 le leano la HRSS le thehiloeng ho NTRU Prime algorithm, e etselitsoeng li-cryptosystems tsa post-quantum.
• Tšehetso bakeng sa liprothokholo tsa TLS 1.0 le TLS 1.1, tse seng li sa sebetse ke komiti ea IETF (Internet Engineering Task Force), e khaotsoe ka ho feletseng. Ho kenyelletsa le monyetla oa ho khutlisa TLS 1.0 / 1.1 ka ho fetola pholisi ea SSLVersionMin e tlositsoe.
• Likopano tsa sethala sa Linux li kenyelletsa tšebeliso ea mokhoa oa "DNS over HTTPS" (DoH, DNS over HTTPS), oo pele o neng o tlisoa ho basebelisi ba Windows, macOS, ChromeOS le Android. DNS-over-HTTPS e tla kengoa tšebetsong ka bo eona bakeng sa basebelisi bao litlhophiso tsa bona li hlakisang bafani ba DNS ba tšehetsang theknoloji ena (bakeng sa DNS-over-HTTPS ho sebelisoa mofani ea tšoanang le oa DNS). Mohlala, haeba mosebelisi a na le DNS 8.8.8.8 e boletsoeng ho litlhophiso tsa sistimi, ts'ebeletso ea Google ea DNS-over-HTTPS (“https://dns.google.com/dns-query”) e tla kengoa tšebetsong ho Chrome haeba DNS. ke 1.1.1.1 , ebe tšebeletso ea DNS-over-HTTPS Cloudflare ("https://cloudflare-dns.com/dns-query"), joalo-joalo.
• Port 10080, e sebelisoang ho bekapo ea Amanda le VMWare vCenter, e kentsoe lethathamong la likou tsa marang-rang tse thibetsoeng. Nakong e fetileng, likou tsa 69, 137, 161, 554, 1719, 1720, 1723, 5060, 5061 le 6566 li ne li se li koetsoe. Bakeng sa likou tse lethathamong la batho ba sa tsebeng letho, ho romela likopo tsa HTTP, HTTPS le FTP ho koetsoe e le ho sireletsa khahlanong le slip ea tlhaselo ea NAT. , e lumellang ha ho buloa leqephe la websaete ka ho khetheha le lokiselitsoeng ke mohlaseli ho sebatli ho theha khokahanyo ea marang-rang ho tloha ho seva sa mohlaseli ho ea ho leha e le efe ea UDP kapa TCP port tsamaisong ea mosebedisi, ho sa tsotellehe tšebeliso ea aterese ea ka hare (192.168.xx, 10) .xxx).
• Hoa khonahala ho hlophisa ts'ebetso ea boiketsetso ea lits'ebetso tsa webo tse ikemetseng (PWA - Progressive Web Apps) ha mosebelisi a kena ka har'a sistimi (Windows le macOS). Autorun e hlophisitsoe leqepheng la chrome://apps. Ts'ebetso e ntse e lekoa ho karolo e nyane ea basebelisi, 'me ho ba bang kaofela e hloka ho kenya tšebetsong "chrome://flags/#enable-desktop-pwas-run-on-os-login".
• E le karolo ea mosebetsi oa ho tsamaisa sebatli ho sebelisa mantsoe a kenyeletsang, faele ea "master_preferences" e fetotsoe lebitso la "initial_preferences". Ho boloka tšebelisano, tšehetso ea "master_preferences" e tla lula e le sebatli nako e itseng. Pejana, sebatli se ne se se se tlositse tšebeliso ea mantsoe "whitelist", "blacklist" le "native".
• Mokhoa o ntlafalitsoeng oa ho Batla ka Sireletsehile, o kenyang licheke tse eketsehileng ho itšireletsa khahlanong le phishing, liketso tse lonya le litšokelo tse ling Websaeteng, e kenyelletsa bokhoni ba ho romella lifaele tse jarollotsoeng bakeng sa ho hlahlojoa ka lehlakoreng la Google. Ntle le moo, Ts'ebetso e Sireletsehileng e Sireletsehileng e sebelisa li-account tsa li-tokens tse hokahaneng le ak'haonte ea Google ha u tsebahatsa liteko tsa ho qhekella, hammoho le ho romella boleng ba lihlooho tsa Referrer ho li-server tsa Google ho lekola hore na li fetisoe sebakeng se kotsi.
• Khatisong ea sethala sa Android, moralo oa likarolo tsa liforomo tsa webo o ntlafalitsoe, tse ntlafalitsoeng hore li sebelisoe ho li-touch screens le litsamaiso tsa batho ba nang le bokooa (bakeng sa litsamaiso tsa komporo, moralo o entsoe bocha ho Chrome 83). Morero oa rework e ne e le ho kopanya moralo oa likarolo tsa foromo le ho felisa ho se lumellane ha setaele - pele, likarolo tse ling tsa sebopeho li entsoe ho latela likarolo tsa sebopeho sa sistimi ea ts'ebetso, 'me tse ling ho latela mekhoa e tsebahalang haholo. Ka lebaka lena, likarolo tse fapaneng li ne li loketse ka tsela e fapaneng bakeng sa li-touchscreens le litsamaiso tsa batho ba nang le bokooa.
• E kentse phuputso ea maikutlo a basebelisi e hlahang ha ho buloa litlhophiso tsa Lebokose la Lekunutu la Sandbox (chrome://settings/privacySandbox).
• Ha o sebelisa mofuta oa Android oa Chrome ho li-PC tse nang le li-skrini tse kholo, kopo e etsoa bakeng sa mofuta oa komporo ea sebaka sa marang-rang, eseng khatiso ea lisebelisoa tsa mehala. U ka fetola boitšoaro u sebelisa "chrome://flags/#request-desktop-site-for-tablets".
• Khoutu ea ho fana ka litafole e entsoe bocha, e ileng ea re lumella ho rarolla mathata a ho se lumellane boitšoarong ha re hlahisa litafole ho Chrome le ho Firefox/Safari.
• Ts'ebetso ea litifikeiti tsa seva ho tsoa ho balaoli ba setifikeiti ba Spain Camerfirma e emisitsoe ka lebaka la liketsahalo tse etsahalang khafetsa ho tloha ka 2017 tse amanang le tlolo ea molao phanong ea litifikeiti. Tšehetso ea litifikeiti tsa bareki e ntse e le teng; thibelo e sebetsa feela ho litifikeiti tse sebelisoang libakeng tsa HTTPS.
• Re ntse re tsoela pele ho kenya tšebetsong ts'ehetso ea ho arola marang-rang ho sireletsa khahlanong le mekhoa ea ho latela metsamao ea basebelisi lipakeng tsa libaka tse ipapisitseng le li-identifiers tsa ho boloka libakeng tse sa rereloang ho boloka tlhahisoleseling ("Supercookies"). Hobane lisebelisoa tse bolokiloeng li bolokiloe sebakeng se tloaelehileng sa mabitso, ho sa tsotellehe sebaka se hlahang, sebaka se seng se ka fumana hore sebaka se seng se kenya lisebelisoa ka ho hlahloba hore na mohloli oo o ka har'a cache. Tšireletso e ipapisitse le ts'ebeliso ea likarolo tsa marang-rang (Network Partitioning), motso oa eona e leng ho kenyelletsa li-cache tse arolelanoang tlamahano e eketsehileng ea lirekoto sebakeng seo leqephe le ka sehloohong le buloang ho sona, e fokotsang tšireletso ea cache bakeng sa mengolo ea ho latela motsamao feela. sebakeng sa hajoale (sengoloa se tsoang ho iframe se ke ke sa khona ho hlahloba hore na sesebelisoa se jarollotsoe sebakeng se seng).

  Theko ea ho arola likarolo ke ho fokotseha ha katleho ea caching, e lebisang keketsehong e fokolang ea nako ea ho kenya maqephe (boholo ka 1.32%, empa bakeng sa 80% ea libaka ka 0.09-0.75%). Ho lekola mokhoa oa ho arola, o ka tsamaisa sebatli ka khetho “—enable-features=PartitionConnectionsByNetworkIsolationKey, PartitionExpectCTStateByNetworkIsolationKey, PartitionHttpServerPropertiesByNetworkIsolationKey, PartitionNelAndReportingByNetworkKessionIsolationSSYSp. CacheB yNetworkIsolationKey".

• E kentse REST API VersionHistory ea kantle (https://versionhistory.googleapis.com/v1/chrome), eo ka eona u ka fumanang leseli mabapi le mefuta ea Chrome mabapi le sethala le makala, hammoho le nalane ea ntlafatso ea sebatli.
• Ho li-iframe tse laoloang ho tsoa libakeng tse ling ntle le sebaka sa leqephe la motheo, pontšo ea JavaScript dialog alert(), confirm() le prompt() e thibetsoe, e tla sireletsa basebelisi boitekong ba motho oa boraro ho hlahisa melaetsa tlas'a qapa hore tsebiso e bontshitswe ke sebaka se seholo.
• WebAssembly SIMD API e tsitsitse mme e fanoa ka mokhoa oa kamehla bakeng sa tšebeliso ea litaelo tsa vector SIMD lits'ebetsong tse hlophisitsoeng ka WebAssembly. Ho netefatsa boikemelo ba sethala, e fana ka mofuta o mocha oa 128-bit o ka emelang mefuta e fapaneng ea data e pakiloeng, le lits'ebetso tse 'maloa tsa mantlha tsa vector bakeng sa ho sebetsana le data e pakiloeng. SIMD e o lumella ho eketsa tlhahiso ka ho bapisa ts'ebetso ea data mme e tla ba molemo ha o hlophisa khoutu ea lehae ho WebAssembly.
• Li-API tse 'maloa tse ncha li kentsoe mokhoa oa liteko tsa Origin (likarolo tsa liteko tse hlokang ts'ebetso e arohaneng). Teko ea Origin e bolela bokhoni ba ho sebetsa le API e boletsoeng ho tsoa lits'ebetsong tse jarollotsoeng ho tsoa ho localhost kapa 127.0.0.1, kapa ka mor'a ho ngolisa le ho amohela token e khethehileng e sebetsang ka nako e lekanyelitsoeng bakeng sa sebaka se itseng.
  • WebTransport ke protocol mme e tsamaisana le JavaScript API bakeng sa ho romella le ho amohela data lipakeng tsa sebatli le seva. Mocha oa puisano o hlophisitsoe ka holim'a HTTP / 3 ho sebelisa protocol ea QUIC e le lipalangoang, tseo, hape, e leng tlatsetso ho protocol ea UDP e tšehetsang multiplexing ea li-connections tse ngata le ho fana ka mekhoa ea ho kenyelletsa e lekanang le TLS / SSL.

    WebTransport e ka sebelisoa ho e-na le mekhoa ea WebSockets le RTCDataChannel, e fanang ka lintlha tse eketsehileng tse kang phetisetso ea mefuta e mengata, melapo e sa lekanyetsoang, mekhoa ea ho fana ka ntle ho taelo, mekhoa e ka tšeptjoang le e sa tšepahaleng. Ho phaella moo, WebTransport e ka sebelisoa sebakeng sa mochine oa Server Push, oo Google e o lahlileng ho Chrome.

  • Sehokelo sa phatlalatso bakeng sa ho hlalosa likhokahano tsa lits'ebetso tsa marang-rang tse ikemetseng (PWAs), se nolofalitsoeng ho sebelisoa "capture_links parameter" ho ponaletso ea ts'ebeliso ea webo le ho lumella libaka hore li ipulele fensetere e ncha ea PWA ha sehokelo sa kopo se tobetsoa kapa se fetohela mocheng oa fensetere e le 'ngoe, e ts'oanang le lits'ebetso tsa mobile.
  • E kentse WebXR Plane Detection API, e fanang ka tlhahisoleseling mabapi le libaka tse hlophisitsoeng hantle tikolohong ea 3D. API e boletsoeng e etsa hore ho khonehe ho qoba ts'ebetso e matla ea lisebelisoa tsa data e fumanoeng ka mohala MediaDevices.getUserMedia(), ka ho sebelisa ts'ebetsong ea ts'ebetso ea li-algorithms tsa pono ea komporo. A re u hopotse hore WebXR API e u lumella ho kopanya mosebetsi le lihlopha tse fapaneng tsa lisebelisoa tsa 'nete, ho tloha ho lihelmete tse emeng tsa 3D ho isa ho litharollo tse thehiloeng ho lisebelisoa tsa mehala.
• Ts'ehetso ea ho sebetsa le li-WebSockets holim'a HTTP/2 (RFC 8441) e kentsoe ts'ebetsong, e sebetsang feela bakeng sa likopo tse sireletsehileng ho WebSockets le boteng ba khokahano ea HTTP/2 e seng e thehiloe le seva, e phatlalalitseng tšehetso bakeng sa "WebSockets over. HTTP/2" katoloso.
• Meeli mabapi le ho nepahala ha boleng ba nako e hlahisoang ke pitso ea ho sebetsa.now() e lumellana ho pholletsa le liplateite tsohle tse tšehetsoeng 'me e fana ka monyetla oa ho arola ba sebetsanang le lits'ebetso tse fapaneng. Mohlala, lits'ebetsong tsa li-desktop, ho nepahala ha ts'ebetso maemong a sa lebelloang ho fokotsoe ho tloha ho li-microseconds tse 5 ho isa ho tse 100.
• Mehaho ea Desktop hona joale e kenyelletsa bokhoni ba ho bala lifaele ho tsoa ho clipboard (ho ngola lifaele ho clipboard ho ntse ho thibetsoe). mosebetsi oa async onPaste(e) {tlohela faele = e.clipboardData.files[0]; let content = emetse file.text(); }
• CSS e sebelisa molao oa @counter-style, o u lumellang hore u hlalose setaele sa hau bakeng sa li-counters le lileibole mananeng a nang le linomoro.
• Lihlopha tsa pseudo tsa CSS ":host()" le ":host-context()" li ekelitse bokhoni ba ho fetisa boleng bo le bong ba bakhethoa ba metsoako () ) ho phaella ho manane a khethang ( ).
• Sehokelo sa GravitySensor se ekelitsoeng bakeng sa ho tseba data ea volumetric (li-axes tse tharo tse hokahaneng) ho tsoa ho sensor ea matla a khoheli.
• File System Access API e fana ka bokhoni ba ho hlalosa likhothaletso tsa ho khetha lebitso la faele le bukana e fanoeng moqoqong bakeng sa ho theha kapa ho bula faele.
• Li-Iframe tse laetsoeng ho tsoa libakeng tse ling li lumelloa ho fihlella WebOTP API haeba mosebelisi a fana ka tumello tse loketseng. WebOTP e u lumella ho bala likhoutu tsa netefatso tsa nako e le 'ngoe tse rometsoeng ka SMS.
• E lumelletsoe ho arolelana phihlello ea litokomane tsa libaka tse hokahaneng ho sebelisoa mochini oa DAL (Digital Asset Links), o lumellang lits'ebetso tsa Android ho amahanngoa le libaka ho nolofatsa ho kena.
• Basebeletsi ba litšebeletso ba lumella tšebeliso ea li-module tsa JavaScript. Ha o hlakisa mofuta oa 'mojule' ha o letsetsa sehahi, mangolo a boletsoeng a tla kengoa ka mokhoa oa li-module 'me a fumanehe bakeng sa ho kenngoa molemong oa basebetsi. Tšehetso ea module e etsa hore ho be bonolo ho arolelana khoutu ho pholletsa le maqephe a marang-rang le basebeletsi ba litšebeletso.
• JavaScript e fana ka bokhoni ba ho lekola boteng ba libaka tsa poraefete nthong e sebelisang "#foo in obj" syntax. sehlopha A {teko e tsitsitseng(obj) {console.log(#foo in obj); } #foo = 0; } Teko(A() e ncha); // 'nete A.test({}); // bohata
• JavaScript ka ho feletseng e lumella tšebeliso ea lentsoe la bohlokoa la ho letela ho li-modules tse holimo, tse lumellang li-call tsa asynchronous hore li kenyelelitsoe ka mokhoa o tsitsitseng ts'ebetsong ea ho kenya mochine le ho qoba ho li phuthela ka "async function". Ka mohlala, sebakeng sa (async function() {wait Promise.resolve(console.log('test')); }()); joale o ka ngola o emetse Promise.resolve(console.log('test'));
• Enjene ea V8 JavaScript e ntlafalitse ts'ebetso ea caching ea template, e ekelitseng lebelo la ho fetisa tlhahlobo ea Speedometer4.5-FlightJS ka 2%.
• Karolo e kholo ea ntlafatso e entsoe ho lisebelisoa bakeng sa baetsi ba marang-rang. Ho kentsoe mokhoa o mocha oa ho hlahloba Memory, o fanang ka lisebelisoa tsa ho hlahloba data ea ArrayBuffer le mohopolo oa Wasm.

  Pontšo ea kakaretso ea ts'ebetso e kentsoe phanele ea Ts'ebetso, e u lumellang ho ahlola hore na sebaka sa marang-rang se hloka ntlafatso kapa che.

  

  Litlhahlobo tsa setšoantšo ho phanele ea Elements le phanele ea Tlhahlobo ea Marang-rang li fana ka leseli mabapi le karo-karolelano ea setšoantšo, likhetho tsa ho fana, le boholo ba faele.

  

  Ka phanele ea tlhahlobo ea marang-rang, joale ho khonahala ho fetola boleng bo amohelehang ba sehlooho sa Content-Encoding.

  

  Ka phanele ea setaele, joale u ka sheba boleng bo baliloeng ka potlako ha u ntse u tsamaea ka har'a liparamente tsa CSS ka ho khetha "Sheba boleng ba komporo" ho menyu ea litaba.

  

Ntle le boqapi le litokiso tsa liphoso, mofuta o mocha o tlosa bofokoli ba 32. Bofokoli bo bongata bo ile ba bonoa ka lebaka la tlhahlobo e ikemetseng e sebelisang AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer le lisebelisoa tsa AFL. Ha ho na mathata a bohlokoa a fumanoeng a ka lumellang motho ho feta maemo ohle a ts'ireletso ea sebatli le ho etsa khoutu ho sistimi e kantle ho tikoloho ea sandbox. E le karolo ea lenaneo la ho lefa meputso ea chelete bakeng sa ho sibolla bofokoli bakeng sa tokollo ea hajoale, Google e lefile likhau tse 21 tse jang $92000 (khau e le 'ngoe ea $20000, khau e le 'ngoe ea $15000, likhau tse 'nè tsa $7500, likhau tse tharo tsa $5000, likhau tse tharo tsa $3000, likhau tse peli le $1000 $500). Boholo ba meputso e 5 ha bo so tsejoe.

Source: opennet.ru