Firefox e rera ho tlosa tšehetso ea FTP ka botlalo

Baetsi ba Firefox hlahisoa morero oa ho emisa ka ho feletseng ho tšehetsa protocol ea FTP, e tla ama bokhoni ba ho khoasolla lifaele ka FTP le ho sheba litaba tsa li-directory ho li-server tsa FTP. Khatisong ea la 77 Phuptjane ea Firefox 2, tšehetso ea FTP e tla holofatsoa ka boiketsetso, empa mabapi le: config tla eketsoe "network.ftp.enabled" e u lumella ho khutlisa FTP. Firefox 78 ESR e haha ​​​​ts'ehetso ea FTP ka ho sa feleng e tla sala butswe. Ka 2021 reriloe tlosa ka ho feletseng khoutu e amanang le FTP.

Lebaka la ho khaotsa ho tšehetsa FTP ke ho se sireletsehe ha protocol ena ho tloha ho fetoloa le ho thibela sephethephethe nakong ea litlhaselo tsa MITM. Ho latela bahlahisi ba Firefox, maemong a sejoale-joale ha ho na lebaka la ho sebelisa FTP sebakeng sa HTTPS ho jarolla lisebelisoa. Ho feta moo, khoutu ea tšehetso ea FTP ea Firefox ke ea khale haholo, e baka mathata a tlhokomelo, 'me e na le nalane ea ho senola bofokoli bo bongata nakong e fetileng. Bakeng sa ba hlokang tšehetso ea FTP, ho khothaletsoa ho sebelisa lits'ebetso tsa kantle tse khomaretsoeng e le litšoantšisi tsa ftp:// URL, tse ts'oanang le kamoo irc:// kapa tg:// li sebelisoa kateng.

A re hopoleng hore pejana ho Firefox 61, ho jarolla lisebelisoa ka FTP maqepheng a butsoeng ka HTTP/HTTPS ho ne ho se ho thibetsoe, mme ho Firefox 70, ho fana ka litaba tsa lifaele tse jarollotsoeng ka ftp ho ile ha emisoa (mohlala, ha ho buloa ka ftp, litšoantšo. , README le lifaele tsa html, le puisano ea ho khoasolla faele ho disk hang-hang e ile ea qala ho hlaha). Ka Chrome hape amohetsoe rera ho tlosa FTP - ho Chrome 80 Ts'ebetso ea ho thibela ts'ehetso ea FTP butle-butle (bakeng sa karolo e itseng ea basebelisi) e qalile, 'me Chrome 82 e reretsoe ho tlosa ka ho feletseng khoutu e etsang hore mofani oa FTP a sebetse. Ho ea ka Google, FTP ha e sa sebelisoa - karolo ea basebelisi ba FTP e ka bang 0.1%.

Source: opennet.ru

Eketsa ka tlhaloso