Google e senotse ho lokolloa ha sebatli sa marang-rang sa Chrome 92. Ka nako e ts'oanang, ho lokolloa ho tsitsitseng ha morero oa mahala oa Chromium, o sebetsang e le motheo oa Chrome, o fumaneha. Sebatli sa Chrome se khetholloa ka ts'ebeliso ea li-logos tsa Google, boteng ba sistimi ea ho romella litsebiso haeba ho ka ba le kotsi, li-module tsa ho bapala litaba tsa video tse sirelelitsoeng (DRM), sistimi ea ho kenya liapdeite ka bo eona, le ho fetisa liparamente tsa RLZ ha u batla. Phallo e latelang ea Chrome 93 e reriloe ka la 31 Phato.
Liphetoho tsa bohlokoa ho Chrome 92:
- Lisebelisoa li kentsoe ho litlhophiso ho laola ho kenyelletsoa ha likarolo tsa Lebokose la Lekunutu la Sandbox. Mosebelisi o fuoa monyetla oa ho tima thekenoloji ea FLoC (Federated Learning of Cohorts), e ntseng e ntlafatsoa ke Google ho nkela li-Cookie tsa ho latela metsamao ka "lihlopha" tse lumellang basebelisi ho tsejoa ka lithahasello tse tšoanang ntle le ho khetholla batho ka bomong. Li-Cohorts li baloa ka lehlakoreng la sebatli ka ho sebelisa li-algorithms tsa ho ithuta ka mochini ho bala data ea nalane le litaba tse butsoeng ho sebatli.
- Bakeng sa basebelisi ba li-desktop, cache ea Back-forward e lumelloa ka mokhoa oa kamehla, e fana ka ho tsamaea hang-hang ha u sebelisa likonopo tsa Morao le Pele kapa ha u ntse u tsamaea ka maqephe a neng a shebiloe pele a sebaka sa hajoale. Pejana, "jump cache" e ne e fumaneha feela meahong ea sethala sa Android.
- Keketseho ea ho itšehla thajana ea libaka le li-add-on ka mekhoa e fapaneng. Haeba pele, mokhoa oa ho itšehla thajana oa Sebaka o netefalitse ho aroloa ha libaka ho tloha ho tse ling ka mekhoa e fapaneng, hape o arola li-add-on tsohle ka mokhoa o arohaneng, joale tokollo e ncha e sebelisa karohano ea li-add-on tsa sebatli ho tloha ho tse ling ka ho tsamaisa e 'ngoe le e' ngoe e kenyelletsoeng- ho kena ts'ebetsong e arohaneng, e entseng hore ho khonehe ho theha tšitiso e 'ngoe ea tšireletso ho li-add-on tse mpe.
- E eketsehile haholo tlhahiso le katleho ea ho lemoha ha phishing. Lebelo la ho fumana phishing ho ipapisitsoe le tlhahlobo ea litšoantšo tsa lehae le eketsehile ho fihlela makhetlo a 50 halofong ea linyeoe, 'me maemong a 99% ho ile ha fumaneha hore bonyane makhetlo a 2.5 a potlakile. Ka kakaretso, nako ea ho hlophisa phishing ka setšoantšo e fokotsehile ho tloha ho metsotsoana e 1.8 ho isa ho 100 ms. Ka kakaretso, mojaro oa CPU o entsoeng ke mekhoa eohle ea ho fana o theohile ka 1.2%.
- Li-Ports 989 (ftps-data) le 990 (ftps) li kentsoe lethathamong la likou tsa marang-rang tse thibetsoeng. Nakong e fetileng, likou tsa 69, 137, 161, 554, 1719, 1720, 1723, 5060, 5061, 6566 le 10080 li ne li se li koetsoe. Bakeng sa likou tse lethathamong la batho ba sa sebetseng, ho romela likopo tsa HTTP, HTTPS le FTP ho thibetsoe khahlanong le NAT tlhaselo ea slipstreaming, e lumellang ha u bula leqephe la sebaka sa marang-rang se lokiselitsoeng ka ho khetheha ke mohlaseli ho sebatli, theha khokahano ea marang-rang ho tloha ho seva sa mohlaseli ho ea ho koung efe kapa efe ea UDP kapa TCP tsamaisong ea mosebelisi, ho sa tsotelehe ts'ebeliso ea marang-rang a ka hare (192.168.xx). , 10.xxx).
- Ho kentsoe tlhoko ea ho sebelisa netefatso ea lintlha tse peli ha ho phatlalatsoa litlatsetso tse ncha kapa lintlafatso tsa mofuta ho Lebenkele la Webo la Chrome.
- Hona joale hoa khoneha ho tima li-add-on tse seng li kentsoe ho sebatli haeba li tlosoa Lebenkeleng la Webo la Chrome ka lebaka la tlolo ea melao.
- Ha u romela lipotso tsa DNS, tabeng ea ho sebelisa li-server tsa DNS tsa khale, ho phaella ho "A" le "AAAA" lirekoto tsa ho fumana liaterese tsa IP, rekoto ea "HTTPS" DNS e boetse e kōptjoa, eo ka eona ho fetisoang litekanyetso ho potlakisa. ho thehoa ha likhokahano tsa HTTPS, joalo ka litlhophiso tsa protocol, TLS ClientHello linotlolo tsa encryption, le lethathamo la li-domain tse nyane.
- Ho letsetsa JavaScript dialogs window.alert, window.confirm le window.prompt ha ho lumelloe li-block tsa iframe tse kentsoeng libakeng tse ling ntle le sebaka sa leqephe la hajoale. Phetoho e tla thusa ho sireletsa basebelisi ho tlhekefetso e amanang le boiteko ba ho hlahisa tsebiso ea motho oa boraro e le kopo e tsoang sebakeng se seholo.
- Leqephe le lecha la tabo le fana ka lethathamo la litokomane tse tsebahalang haholo tse bolokiloeng ho Google Drive.
- Hoa khonahala ho fetola lebitso le letšoao bakeng sa lits'ebetso tsa PWA (Progressive Web Apps).
- Bakeng sa palo e nyane e sa reroang ea liforomo tsa tepo tse hlokang hore o kenye aterese kapa nomoro ea karete ea mokoloto, likhothaletso tsa ho tlatsa ka bohona li tla emisoa joalo ka teko.
- Mofuteng oa komporo, khetho ea ho batla litšoantšo (ntho ea "Fumana Sets'oants'o" ho menyu ea litaba) e fetotsoe hore e sebelise litšebeletso tsa Google Lens ho fapana le enjine e tloaelehileng ea ho batla ea Google. Ha o tobetsa konopo e tsamaellanang ho menu ea litaba, mosebelisi o tla fetisetsoa ho sesebelisoa se ikhethileng sa webo.
- Sebokeng sa mokhoa oa incognito, lihokelo tsa nalane ea ho bala li patiloe (lihokelo ha li na thuso, kaha li lebisitse ho butsoeng ha stub e nang le tlhahisoleseling eo nalane e sa bokelloang).
- E kentse litaelo tse ncha tse arotsoeng ha li kenngoa bareng ea aterese. Mohlala, ho bonts'a konopo ea ho ea leqepheng la ho sheba ts'ireletso ea li-password le li-add-on, feela thaepa "ts'ireletso ea ts'ireletso", 'me u ee ho litlhophiso tsa ts'ireletso le khokahano, thaepa feela "laola litlhophiso tsa ts'ireletso" le " laola sync”.
- Liphetoho tse ikhethileng ho mofuta oa Android oa Chrome:
- Phanele e na le konopo e ncha eo u ka e khethang ea "Magic Toolbar" e bonts'ang likhutšoane tse fapaneng tse khethiloeng ho latela ts'ebetso ea mosebelisi ha joale, 'me e kenyelletsa likhokahano tse tla hlokahala hajoale.
- Ho kenngwa tshebetsong ha moetso wa ho ithuta ka mochini ho lemoha liteko tsa phishing e ntlafalitsoe. Ha liteko tsa phishing li fumanoa, ntle le ho hlahisa leqephe la temoso, sebatli se tla romella leseli mabapi le mofuta oa mochini oa ho ithuta, boima bo baliloeng bakeng sa sehlopha ka seng, le folakha bakeng sa ho sebelisa mofuta o mocha ho ts'ebeletso ea kantle ea Safe Browsing. .
- E tlositse "Bontša litlhahiso tsa maqephe a ts'oanang ha leqephe le sa fumanehe", e entseng hore maqephe a ts'oanang a khothaletsoe ho ipapisitsoe le ho romella potso ho Google haeba leqephe le sa fumanehe. Peakanyo ena e kile ya tloswa ho komporo ya komporo.
- Tšebeliso ea mokhoa oa ho itšehla thajana bakeng sa lits'ebetso tsa motho ka mong e ekelitsoe. Ka mabaka a tšebeliso ea lisebelisoa, ke libaka tse kholo feela tse khethiloeng ho fihlela joale tse isitsoeng lits'ebetsong tse arohaneng. Phetolelong e ncha, ho itšehla thajana ho tla qala ho sebetsa libakeng tseo mosebelisi a kenngoeng ho tsona ka netefatso ka OAuth (mohlala, ho hokela ka ak'haonte ea Google) kapa tse behang sehlooho sa Cross-Origin-Opener-Policy HTTP. Bakeng sa ba batlang ho nolofalletsa ho itšehla thajana lits'ebetsong tsa libaka tsohle, ho fanoe ka "chrome://flags/#enable-site-per-process".
- Mecha ea ts'ireletso ea enjine ea V8 khahlano le litlhaselo tsa kanale tse ka thoko joalo ka Specter e holofalitsoe, e sa nkoeng e sebetsa joalo ka ho arola libaka ka lits'ebetso tse fapaneng. Mofuteng oa li-desktop, mekhoa ena e ile ea holofala morao ha ho lokolloa Chrome 70.
- Phihlello e nolofalitsoeng ea litlhophiso tsa tumello ea sebaka, joalo ka maekrofounu, khamera, le phihlello ea sebaka. Ho hlahisa lenane la tumello, tobetsa feela letšoao la senotlolo bareng ea aterese, ebe u khetha karolo ea "Litumello".
- Li-API tse 'maloa tse ncha li kentsoe mokhoa oa liteko tsa Origin (likarolo tsa liteko tse hlokang ts'ebetso e arohaneng). Teko ea Origin e bolela bokhoni ba ho sebetsa le API e boletsoeng ho tsoa lits'ebetsong tse jarollotsoeng ho tsoa ho localhost kapa 127.0.0.1, kapa ka mor'a ho ngolisa le ho amohela token e khethehileng e sebetsang ka nako e lekanyelitsoeng bakeng sa sebaka se itseng.
- API File Handling, e u lumellang hore u ingolise lits'ebetso tsa webo joalo ka bahlokomeli ba lifaele. Ka mohlala, ts'ebeliso ea marang-rang e sebetsang ka mokhoa oa PWA (Progressive Web Apps) e nang le mohlophisi oa mongolo e ka ingolisa e le ".txt", ka mor'a moo e ka sebelisoa ho mookameli oa faele ea tsamaiso ho bula lifaele tsa mongolo.
- Shared Element Transitions API, e u lumellang hore u sebelise litlamorao tse seng li entsoe tse fanoeng ke sebatli se bonts'ang liphetoho tsa boemo ba sebopeho leqepheng le le leng (SPA, lits'ebetso tsa leqephe le le leng) le maqephe a mangata (MPA, lits'ebetso tsa maqephe a mangata. ) lits'ebetso tsa marang-rang.
- API File Handling, e u lumellang hore u ingolise lits'ebetso tsa webo joalo ka bahlokomeli ba lifaele. Ka mohlala, ts'ebeliso ea marang-rang e sebetsang ka mokhoa oa PWA (Progressive Web Apps) e nang le mohlophisi oa mongolo e ka ingolisa e le ".txt", ka mor'a moo e ka sebelisoa ho mookameli oa faele ea tsamaiso ho bula lifaele tsa mongolo.
- Paramethara ea ho fetola boholo e kenyelelitsoe molaong oa @font-face CSS, o u lumellang ho lekanya boholo ba glyph bakeng sa setaele se itseng sa fonte ntle le ho fetola boleng ba thepa ea CSS ea boholo ba fonte (sebaka se tlas'a sebopeho se ntse se tšoana. , empa boholo ba glyph sebakeng sena boa fetoha).
- Ho JavaScript, lintho tsa Array, String, le TypedArray li sebelisa mokhoa oa at(), o u lumellang hore u sebelise indexing e amanang le eona (maemo a amanang a hlalositsoe e le index ea array), ho kenyelletsa le ho hlakisa litekanyetso tse mpe tse amanang le pheletso (mohlala, "arr.at(-1)" e tla khutlisa karolo ea ho qetela ea sehlopha).
- Thepa ea dayPeriod e kentsoe ho sehahi sa Intl.DateTimeFormat JavaScript, se u lumellang hore u bontshe nako e lekantsoeng ea letsatsi (hoseng, mantsiboea, thapama, bosiu).
- Ha u sebelisa lintho tsa SharedArrayBuffers, tse u lumellang hore u thehe li-arrays mohopolong o arolelanoang, joale u hloka ho hlalosa lihlooho tsa Cross-Origin-Opener-Policy le Cross-Origin-Embedder-Policy HTTP, ntle le moo kopo e tla thibeloa.
- Liketso tsa "togglemicrophone", "togglecamera" le "hangup" li kenyelelitsoe ho Media Session API, e lumellang libaka tse sebelisang tsamaiso ea liboka tsa video ho hokela li-buttons tsa semumu / se sa bueng, ho tima khamera le ho qetela tse bontšitsoeng ho pitso ea sebopeho sa setšoantšo-setšoantšong.
- Web Bluetooth API e kentse bokhoni ba ho sefa lisebelisoa tsa Bluetooth tse fumanoeng ka moetsi le li-identifiers tsa lihlahisoa. Sesefa se setiloe ka mokhoa oa "options.filters" ka mokhoa oa Bluetooth.requestDevice().
- Mohato oa pele oa ho fokotsa likahare tsa sehlooho sa HTTP sa Moemeli-Mosebelisi o se o kentsoe tšebetsong: thebo ea Litaba tsa DevTools joale e bonts'a temoso mabapi le ho theoha ha navigator.userAgent, navigator.appVersion le navigator.platform.
- Karolo ea lintlafatso e entsoe ho lisebelisoa bakeng sa baetsi ba marang-rang. Web console e fana ka bokhoni ba ho hlalosa mantsoe a "consst". Ka har'a karolo ea Elements, likarolo tsa iframe li na le bokhoni ba ho sheba lintlha ka potlako ka menu ea moelelo e hlahang ha u tobetsa ntho e nepahetseng. E ntlafalitse ho lokisa liphoso tsa CORS (Ho arolelana mehloli e fapaneng) Bokhoni ba ho sefa likopo tsa marang-rang ho tsoa ho WebAssembly bo kentsoe phanele ea tlhahlobo ea ts'ebetso ea marang-rang. Ho hlahisitsoe mohlophisi o mocha oa CSS Grid ("pontšo: grid" le "splay: inline-grid") e nang le ts'ebetso ea ho lekola liphetoho.
Ntle le boqapi le litokiso tsa liphoso, mofuta o mocha o tlosa bofokoli ba 35. Bofokoli bo bongata bo ile ba bonoa ka lebaka la tlhahlobo e ikemetseng e sebelisang AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer le lisebelisoa tsa AFL. Ha ho na mathata a bohlokoa a fumanoeng a ka lumellang motho ho feta maemo ohle a ts'ireletso ea sebatli le ho etsa khoutu ho sistimi e kantle ho tikoloho ea sandbox. E le karolo ea lenaneo la ho lefa meputso ea chelete bakeng sa ho sibolla bofokoli bakeng sa tokollo ea hajoale, Google e lefile likhau tse 24 tse jang $112000 (likhau tse peli tsa $15000, likhau tse 'ne tsa $10000, khau e le 'ngoe ea $8500, likhau tse peli tsa $7500, likhau tse tharo tsa $5000, $3000 le $500 e le' ngoe, ). Boholo ba meputso e 11 ha bo so tsejoe.
Source: opennet.ru