Ho lokolloa ha nginx 1.19.3 le njs 0.4.4

Thehile tokollo e holimo nginx 1.19.3, moo ntshetsopele ya bokgoni e ncha tsoela pele (ka ka tsela e tšoanang tšehetsoa e tsitsitseng lekala 1.18 Ke feela liphetoho tse amanang le ho felisoa ha liphoso tse tebileng le bofokoli bo etsoang).

ka sehloohong fetola:

  • Mojule o kenyelelitsoe ngx_stream_set_module, e u lumellang hore u fane ka boleng ho mofuta o fapaneng

    seva {
    mamela 12345;
    beha $ 'nete 1;
    }

  • Tataiso e kentsoe lifolakha_ tsa_cookie ho hlakisa lifolakha bakeng sa Li-cookies ho likhokahano tsa proxied. Mohlala, ho kenya "httponly" folakha ho Cookie "one", le "nosecure" le "samesite=strict" lifolakha bakeng sa Li-cookie tse ling kaofela, u ka sebelisa kaho e latelang:

    proxy_cookie_flags e le 'ngoe httpfeela;
    proxy_cookie_flags ~ nosecure samesite=thata;

  • Taelo e ts'oanang userid_flags bakeng sa ho kenyelletsa lifolakha ho Cookie e boetse e kengoa tšebetsong bakeng sa mojule oa ngx_http_userid.

Ka nako e le 'ngoe etsahetse lokolla EA-0.4.4, mofetoleli oa JavaScript bakeng sa seva sa websaete ea nginx. Mofetoleli oa njs o sebelisa litekanyetso tsa ECMAScript mme o u lumella ho holisa bokhoni ba nginx ba ho sebetsana le likopo u sebelisa mangolo ho tlhophiso. Lingoliloeng li ka sebelisoa ho faele ea tlhophiso ho hlalosa mohopolo o tsoetseng pele bakeng sa likopo tsa ho sebetsa, ho hlahisa tlhophiso, ho hlahisa karabelo ka matla, ho fetola kopo / karabelo, kapa ho theha li-stubs kapele ho rarolla mathata lits'ebetsong tsa webo. Khatisong e ncha:

  • Tšehetso e ekelitsoeng bakeng sa karohano ea pono ea linomoro ka linomoro (mohlala, “1_000”).
  • E kentse mekhoa e sieo bakeng sa %TypedArray%.prototype: every(), filter(), find(), findIndex(), forEach(), akarelletsa(), indexOf(), lastIndexOf(), map(), fokotsa(), reduceRight(), reverse(), some().
  • E kentse mekhoa e sieo bakeng sa %TypedArray%: ho tloha(), ea().
  • Ntho e kentsoeng ea DataView.

    : >> (dataView e ncha(buf.buffer)).getUint16()
    : 32974

  • Sesebelisoa sa Buffer se kentsoeng.

    : >> var buf = Buffer.from([0x80,206,177,206,178])
    : e sa hlalosoang
    : >> buf.slice(1).toString()
    : 'abe'
    : >> buf.toString('base64')
    : 'gM6xzrI='

  • E kentse tšehetso ea ntho ea Buffer ho mekhoa ea "crypto" le "fs", le ho netefatsa hore fs.readFile(), Hash.prototype.digest() le Hmac.prototype.digest() li khutlisitse mohlala oa ntho ea Buffer.
  • Tšehetso ea ArrayBuffer e kenyelelitsoe ho mokhoa oa TextDecoder.prototype.decode().

Source: opennet.ru

Eketsa ka tlhaloso