Phatlalatso ea Chrome 93

Google e senotse ho lokolloa ha sebatli sa marang-rang sa Chrome 93. Ka nako e ts'oanang, tokollo e tsitsitseng ea morero oa mahala oa Chromium, o sebetsang e le motheo oa Chrome, o fumaneha. Sebatli sa Chrome se khetholloa ka ts'ebeliso ea li-logos tsa Google, boteng ba sistimi ea ho romella litsebiso haeba ho ka ba le kotsi, li-module tsa ho bapala litaba tsa video tse sirelelitsoeng (DRM), sistimi ea ho kenya liapdeite ka bo eona, le ho fetisa liparamente tsa RLZ ha u batla. Phallo e latelang ea Chrome 94 e reriloe ka la 21 Loetse (ntlafatso e fetiselitsoe ho potoloho ea tokollo ea libeke tse 4).

Liphetoho tsa bohlokoa ho Chrome 93:

• Moralo oa block e nang le tlhaiso-leseling ea leqephe (lintlha tsa leqephe) e se e le ea morao-rao, moo ts'ehetso ea li-blocks tsa sehlaha e sebelisitsoeng, mme manane a theoha a nang le litokelo tsa phihlello a nkeloe sebaka ke li-switches. Manane a netefatsa hore lintlha tsa bohlokoa ka ho fetisisa li hlahisoa pele. Phetoho ha ea lumelloa ho basebelisi bohle; ho e kenya tšebetsong, u ka sebelisa "chrome://flags/#page-info-version-2-desktop".
• Bakeng sa karolo e nyenyane ea basebelisi, e le teko, letšoao le sireletsehileng la khokahanyo bareng ea aterese le ile la nkeloa sebaka ke letšoao le sa nke lehlakore le sa bakeng tlhaloso e habeli (lotlolo e ile ea nkeloa sebaka ke letšoao la "V"). Bakeng sa likhokahano tse thehiloeng ntle le encryption, letšoao la "ha le sireletsehe" le ntse le tsoela pele ho bontšoa. Lebaka le boletsoeng bakeng sa ho nkela letšoao sebaka ke hore basebelisi ba bangata ba amahanya letšoao la senotlolo le taba ea hore litaba tsa sebaka sa marang-rang li ka tšeptjoa, ho fapana le ho li bona e le sesupo sa hore khokahano e patiloe. Ho latela tlhahlobo ea Google, ke 11% feela ea basebelisi ba utloisisang moelelo oa setšoantšo ka senotlolo.
• Lethathamo la li-tab tse sa tsoa koaloa hona joale le bonts'a likahare tsa lihlopha tse koetsoeng tsa li-tab (pele lenane le ne le bontša feela lebitso la sehlopha ntle le ho qaqisa litaba) ka bokhoni ba ho khutlisa sehlopha sohle le li-tab tsa motho ka mong ho tsoa sehlopheng hang. Sebopeho ha sea lumelloa ho basebelisi bohle, kahoo u ka hloka ho fetola "chrome://flags/#tab-restore-sub-menus" ho e nolofalletsa.
• Bakeng sa likhoebo, litlhophiso tse ncha li kentsoe ts'ebetsong: DefaultJavaScriptJitSetting, JavaScriptJitAllowedForSites le JavaScriptJitBlockedForSites, e u lumellang ho laola mokhoa oa JIT-less, o thibelang ts'ebeliso ea JIT ha o etsa JavaScript (ho sebelisoa mofetoleli oa Ignition feela) le thibelo ea ts'ebetso e ke keng ea etsoa. memori nakong ya tshebetso ya khoutu. Ho thibela JIT ho ka thusa ho ntlafatsa ts'ireletso ea ho sebetsa ka lits'ebetso tse ka bang kotsi tsa webo ka litšenyehelo tsa ho fokotsa ts'ebetso ea JavaScript ka hoo e ka bang 17%. Hoa hlokomeleha hore Microsoft e tsoetse pele le ho feta mme e kentse tšebetsong "Super Duper Secure" mokhoa oa liteko ho sebatli sa Edge, e lumellang mosebelisi ho tima JIT le ho kenya tšebetsong mekhoa ea ts'ireletso ea Hardware e sa sebetseng ea CET (Controlflow-Enforcement Technology), ACG (Arbitrary Code Guard) le CFG ( Control Flow Guard) bakeng sa lits'ebetso tsa ts'ebetso ea litaba tsa webo. Haeba teko e bonahala e atlehile, joale re ka lebella hore e fetisetsoe karolong e kholo ea Chrome.
• Leqephe le lecha la tabo le fana ka lethathamo la litokomane tse tsebahalang haholo tse bolokiloeng ho Google Drive. Likahare tsa lenane li tsamaisana le karolo ea Priority ho drive.google.com. Ho laola ponahatso ea litaba tsa Google Drive, u ka sebelisa litlhophiso tsa "chrome://flags/#ntp-modules" le "chrome://flags/#ntp-drive-module".
• Likarete tse ncha tsa tlhahisoleseling li kentsoe leqepheng la Open New Tab ho u thusa ho fumana litaba tse shebiloeng haufinyane le lintlha tse amanang. Likarete li etselitsoe ho etsa hore ho be bonolo ho tsoela pele ho sebetsa ka tlhahisoleseding eo ho shebella ho ile ha sitisoa, mohlala, likarete li tla u thusa ho fumana recipe bakeng sa sejana se sa tsoa fumanoa Inthaneteng empa se lahlehile ka mor'a ho koala leqephe, kapa u tsoele pele ho etsa. tse rekang mabenkeleng. E le teko, basebelisi ba fuoa limmapa tse peli tse ncha: "Recipes" (chrome://flags/#ntp-recipe-tasks-module) bakeng sa ho batla litlolo tsa ho pheha le ho bonts'a litlolo tse sa tsoa shejoa; "Ho reka" (chrome://flags/#ntp-chrome-cart-module) bakeng sa likhopotso mabapi le lihlahisoa tse khethiloeng mabenkeleng a marang-rang.
• Mofuta oa Android o eketsa ts'ehetso ea boikhethelo bakeng sa phanele e tsoelang pele ea ho batla (chrome://flags/#continuous-search), e u lumellang ho boloka liphetho tsa morao-rao tsa patlo ea Google li bonahala (phanele e ntse e tsoela pele ho bonts'a liphetho kamora ho fetela maqepheng a mang).
• Mokhoa oa teko oa ho arolelana qotsa o kentsoe mofuteng oa Android (chrome://flags/#webnotes-stylize), e o lumellang ho boloka sekhechana se khethiloeng sa leqephe joalo ka qotso le ho se arolelana le basebelisi ba bang.
• Ha o phatlalatsa litlatsetso tse ncha kapa lintlafatso tsa mofuta Lebenkeleng la Webo la Chrome, ho hlokahala netefatso ea lintlha tse peli.
• Basebelisi ba Akhaonto ea Google ba na le boikhethelo ba ho boloka lintlha tsa tefo ho akhaonto ea bona ea Google.
• Ka mokhoa oa incognito, haeba khetho ea ho hlakola data ea ho tsamaea e kentsoe, puisano e ncha ea netefatso ea ts'ebetso e kentsoe ts'ebetsong, e hlalosang hore ho hlakola data ho tla koala fensetere le ho felisa linako tsohle ka mokhoa oa incognito.
• Ka lebaka la ho se lumellane ho fumanoeng le firmware ea lisebelisoa tse ling, tšehetso ea mokhoa o mocha oa tumellano oa bohlokoa o kenyellelitsoeng ho Chrome 91, o hananang le ho hakanya lik'homphieutha tsa quantum, ho ipapisitsoe le ts'ebeliso ea katoloso ea CECPQ1.3 (Combined Elliptic-Curve le Post-Quantum 2). TLSv2, e kopanyang mokhoa oa khale oa phapanyetsano oa bohlokoa oa X25519 le morero oa HRSS o thehiloeng ho NTRU Prime algorithm e etselitsoeng li-cryptosystems tsa post-quantum.
• Li-Ports 989 (ftps-data) le 990 (ftps) li kenyelelitsoe palo ea likou tsa marang-rang tse thibetsoeng e le ho thibela tlhaselo ea ALPACA. Pejana, molemong oa ho itšireletsa khahlanong le litlhaselo tse thellang tsa NAT, likou tsa 69, 137, 161, 554, 1719, 1720, 1723, 5060, 5061, 6566 le 10080 li ne li se li koetsoe.
• TLS ha e sa sebelisa li-ciphers ho latela algorithm ea 3DES. Haholo-holo, TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher suite, e ka hlaseloang habonolo ke Sweet32, e tlositsoe.
• Tšehetso ea Ubuntu 16.04 e khaotsoe.
• Hoa khoneha ho sebelisa WebOTP API pakeng tsa lisebelisoa tse fapaneng tse hokahaneng ka akhaonto e tloaelehileng ea Google. WebOTP e lumella sesebelisoa ho bala likhoutu tsa netefatso tsa nako e le 'ngoe tse rometsoeng ka SMS. Phetoho e reriloeng e etsa hore ho khonehe ho fumana khoutu ea netefatso sesebelisoa sa mohala se sebelisang Chrome bakeng sa Android, le ho e sebelisa ho sistimi ea komporo.
• API ea Litlhahiso tsa Moemeli oa Mosebelisi e ekelitsoe, e ntlafalitsoe e le sebaka sa hlooho ea Moemeli-Mosebelisi. Litlhahiso tsa Bareki ba Moemeli-Basebelisi li u lumella ho hlophisa thomello ea data e ikhethileng mabapi le sebatli le li-parameter tsa sistimi (mofuta, sethala, joalo-joalo) feela kamora kopo ea seva. Mosebelisi, ka lehlakoreng le leng, a ka tseba hore na ke tlhahisoleseling efe e ka fuoang beng ba libaka. Ha o sebelisa Litlhahiso tsa Bareki ba Moemeli-Mosebelisi, sets'oants'o sa sebatli ha se fetisoe ntle le kopo e hlakileng, 'me ka mokhoa o ikhethileng ho hlalosoa feela li-parameter tsa mantlha, e leng se etsang hore ho be thata ho tsebahatsa.

  Phetolelo e ncha e ts'ehetsa parameter ea Sec-CH-UA-Bitness ho khutlisa data mabapi le sethala sa marang-rang, se ka sebelisoang ho sebeletsa lifaele tsa binary tse ntlafalitsoeng. Ka ho sa feleng, parameter ea Sec-CH-UA-Platform e romelloa ka tlhahisoleseding e akaretsang ea sethaleng. Boleng ba UADataValues ​​bo khutlisitsoeng ha o letsetsa getHighEntropyValues() e sebelisoa ka mokhoa o ikhethileng ho khutlisa liparamente tse akaretsang haeba ho sa khonehe ho khutlisa khetho e qaqileng. Mokhoa oa hoJSON o kentsoe nthong ea NavigatorUAData, e u lumellang hore u sebelise lihahi tse kang JSON.stringify(navigator.userAgentData).

• Bokhoni ba ho bokella lisebelisoa ka har'a liphutheloana tsa sebopeho sa Web Bundle, tse loketseng ho hlophisa ho jarolloa ha palo e kholo ea lifaele tse tsamaeang le tsona (litaele tsa CSS, JavaScript, litšoantšo, iframes), li tsitsitse ebile li fanoa ka mokhoa oa kamehla. Har'a mefokolo ea tšehetso e teng bakeng sa liphutheloana tsa lifaele tsa JavaScript (webpack), eo Web Bundle e lekang ho e felisa: sephutheloana ka boeona, empa eseng likarolo tsa eona, se ka qetella se le ka har'a cache ea HTTP; ho bokella le ho phethahatsa ho ka qala feela ka mor'a hore sephutheloana se kopitsoe ka ho feletseng; Lisebelisoa tse ling tse kang CSS le litšoantšo li tlameha ho kenngoa ka mokhoa oa likhoele tsa JavaScript, tse eketsang boholo le ho hloka mohato o mong oa ho arola.
• WebXR Plane Detection API e kenyelelitsoe, e fana ka tlhahisoleseling mabapi le libaka tse hlophisitsoeng hantle tikolohong ea 3D. API e boletsoeng e etsa hore ho khonehe ho qoba ts'ebetso e matla ea lisebelisoa tsa data e fumanoeng ka mohala MediaDevices.getUserMedia(), ka ho sebelisa ts'ebetsong ea ts'ebetso ea li-algorithms tsa pono ea komporo. A re u hopotse hore WebXR API e u lumella ho kopanya mosebetsi le lihlopha tse fapaneng tsa lisebelisoa tsa 'nete, ho tloha ho lihelmete tse emeng tsa 3D ho isa ho litharollo tse thehiloeng ho lisebelisoa tsa mehala.
• Li-API tse 'maloa tse ncha li kentsoe mokhoa oa liteko tsa Origin (likarolo tsa liteko tse hlokang ts'ebetso e arohaneng). Teko ea Origin e bolela bokhoni ba ho sebetsa le API e boletsoeng ho tsoa lits'ebetsong tse jarollotsoeng ho tsoa ho localhost kapa 127.0.0.1, kapa ka mor'a ho ngolisa le ho amohela token e khethehileng e sebetsang ka nako e lekanyelitsoeng bakeng sa sebaka se itseng.
  • Multi-Screen Window Placement API e hlahisitsoe, e leng se u lumellang hore u behe lifensetere holim'a pontšo leha e le efe e amanang le tsamaiso ea hona joale, hammoho le ho boloka boemo ba fensetere 'me, ha ho hlokahala, u atolose fensetere ho skrine se feletseng. Mohlala, ka ho sebelisa API e boletsoeng, sesebelisoa sa webo sa ho hlahisa nehelano se ka hlophisa ponts'o ea li-slide skrineng se seng, 'me sa bonts'a molaetsa ho se seng.
  • Hlooho ea Cross-Origin-Embedder-Policy, e laolang mokhoa oa ho itšehla thajana oa Cross-Origin mme e o lumella ho hlalosa melao e sireletsehileng ea ts'ebeliso leqepheng la Privileged Operations, e se e ts'ehetsa paramethara ea "credentialless" ho thibela phetiso ea tlhahisoleseling e amanang le netefatso joalo ka. Li-cookie le litifikeiti tsa bareki.
  • Bakeng sa lits'ebetso tsa marang-rang tse ikemetseng (PWA, Progressive Web Apps) tse laolang ho fana ka litaba tsa lifensetere le ho kenya letsoho, ho fanoe ka sekoahelo se nang le li-control tsa lifensetere, joalo ka terata ea sehlooho le likonopo tsa ho atolosa/ho putlama. Sekoahelo se atolosa sebaka se ka lokisoang ho koahela fensetere kaofela 'me se u lumella ho eketsa likarolo tsa hau sebakeng sa sehlooho.
  • E ekelitse bokhoni ba ho theha lits'ebetso tsa PWA tse ka sebelisoang joalo ka li-URL. Mohlala, sesebelisoa sa music.example.com se ka ingolisa joalo ka sebatli sa URL https://*.music.example.com mme liphetoho tsohle tse tsoang lits'ebetsong tsa kantle li sebelisa lihokelo tsena, mohlala, ho tsoa ho manqosa a potlakileng le bareki ba lengolo-tsoibila, li tla etella pele. ho buloa ha lits'ebetso tsena tsa PWA, eseng tabo e ncha ea sebatli.
• Hoa khoneha ho kenya lifaele tsa CSS ho sebelisa poleloana ea "import", e ts'oanang le ho kenya li-module tsa JavaScript, tse loketseng ha u iketsetsa likarolo tsa hau mme li u lumella ho etsa ntle le ho fana ka mekhoa e sebelisang khoutu ea JavaScript. lakane ea ho reka kantle ho naha ho tsoa ho './styles.css' assert {type: 'css'}; document.adoptedStyleSheets = [leqephe]; shadowRoot.adoptedStyleSheets = [lakane];
• Ho fanoe ka mokhoa o mocha oa static, AbortSignal.abort(), o khutlisetsang ntho ea AbortSignal e seng e setiloe hore e felisoe. Sebakeng sa mela e 'maloa ea khoutu ho theha ntho ea AbortSignal sebakeng se senyehileng, joale u ka feta ka mola o le mong oa "return AbortSignal.abort()".
• The Flexbox element e ekelitse ts'ehetso bakeng sa ho qala, ho qetela, ho qala, ho iphelisa, ho qetela, ho le letšehali le ka ho le letona mantsoe a bohlokoa, ho tlatsana le setsi, mantsoe a sehlooho a flex-start le a flex-end ka lisebelisoa tsa ho lumellana ho nolofalitsoeng ha boemo ba likarolo tsa flex.
• Sehahi sa Error() se sebelisa thepa e ncha ea "sesosa", e u lumellang ho hokahanya liphoso habonolo. const parentError = Phoso e ncha('motsoali'); const error = Phoso e ncha('motsoali', { sesosa: parentError }); console.log(error.cause === parentError); // → 'nete
• Ts'ehetso e ekelitsoeng bakeng sa mokhoa oa noplaybackrate ho thepa ea HTMLMediaElement.controlsList, e u lumellang ho tima likarolo tsa sebopeho se fanoeng ho sebatli bakeng sa ho fetola lebelo la ho bapala la litaba tsa multimedia.
• E kentse hlooho ea Sec-CH-Prefers-Color-Scheme, e lumellang, sethaleng sa kopo ea ho romela, ho fetisa lintlha tse mabapi le moralo oa mebala o ratoang ke mosebedisi o sebelisitsoeng ho lipotso tsa mecha ea litaba tsa "prefers-color-scheme", tse tla lumella sebaka sa marang-rang ho ntlafatsa. ho kenya CSS e amanang le morero o khethiloeng le ho qoba li-switches tse bonahalang tse tsoang ho merero e meng.
• E kentse thepa ea Object.hasOwn, e leng mofuta o nolofalitsoeng oa Object.prototype.hasOwnProperty, e kentsoeng tšebetsong e le mokhoa o sa fetoheng. Object.hasOwn({ prop: 42 }, 'prop') // → 'nete
• E etselitsoe ho kopanya matla a brute-force ka potlako haholo, moqapi oa JIT oa Sparkplug o kentse mokhoa oa ts'ebetso ea batch ho fokotsa bokaholimo ba ho fetola maqephe a memori lipakeng tsa mekhoa ea ho ngola le ea ho matha. Hona joale Sparkplug e bokella mesebetsi e mengata ka nako e le 'ngoe' me e letsetsa mprotect hang ho fetola tumello ea sehlopha sohle. Mokhoa o reriloeng o fokotsa haholo nako ea ho bokella (ho fihla ho 44%) ntle le ho ama ts'ebetso ea JavaScript hampe.
• Mofuta oa Android o tima ts'ireletso ea enjine ea V8 khahlano le litlhaselo tse lehlakoreng tse kang Specter, tse sa nkoeng li sebetsa joalo ka ho arola libaka ka lits'ebetso tse fapaneng. Phetolelong ea li-desktop, mekhoa ena e ile ea holofala morao ha ho lokolloa Chrome 70. Ho thibela licheke tse sa hlokahaleng ho lumelletsoe ho eketsa ts'ebetso ka 2-15%.
• Lintlafatso li entsoe ho lisebelisoa bakeng sa baetsi ba marang-rang. Ka mokhoa oa ho hlahloba leqephe la setaele, hoa khoneha ho hlophisa lipotso tse hlahisitsoeng ho sebelisoa poleloana ea @container. Mokhoeng oa ho hlahloba marang-rang, ponelo-pele ea lisebelisoa ka mokhoa oa Web bundle e kenngoa ts'ebetsong. Ho web console, likhetho tsa ho kopitsa likhoele ka mokhoa oa JavaScript kapa JSON literals li kentsoe lethathamong la litaba. E ntlafalitse ho lokisa liphoso tse amanang le CORS (Cross-Origin Resource Sharing).

Ntle le boqapi le litokiso tsa liphoso, mofuta o mocha o tlosa bofokoli ba 27. Bofokoli bo bongata bo ile ba bonoa ka lebaka la tlhahlobo e ikemetseng e sebelisang AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer le lisebelisoa tsa AFL. Ha ho na mathata a bohlokoa a fumanoeng a ka lumellang motho ho feta maemo ohle a ts'ireletso ea sebatli le ho etsa khoutu ho sistimi e kantle ho tikoloho ea sandbox. E le karolo ea lenaneo la ho lefa meputso ea chelete bakeng sa ho sibolla bofokoli bakeng sa tokollo ea hajoale, Google e lefile likhau tse 19 tse jang $136500 (likhau tse tharo tsa $20000, khau e le 'ngoe ea $15000, likhau tse tharo tsa $10000, khau e le 'ngoe ea $7500, likhau tse tharo tsa $5000 le likhau tse tharo tsa $3000). Boholo ba meputso e 5 ha bo so tsejoe.

Source: opennet.ru