Ukukhutshwa kweChrome 97

UGoogle uye watyhila ukukhululwa kwesiphequluli sewebhu se-Chrome 97 Ngexesha elifanayo, ukukhululwa okuzinzile kweprojekthi yeChromium yamahhala, esebenza njengesiseko seChrome, iyafumaneka. Umkhangeli weChrome wahlulwa ngokusetyenziswa kweempawu zikaGoogle, ubukho benkqubo yokuthumela izaziso xa kukho ingozi, iimodyuli zokudlala umxholo wevidiyo okhuselweyo wekopi (DRM), inkqubo yokufaka uhlaziyo ngokuzenzekelayo, kunye nokuhambisa iiparamitha zeRLZ xa ukukhangela. Kulabo bafuna ixesha elingakumbi lokuhlaziya, kukho isebe elihlukeneyo eliLondolozwe eliZinzileyo, elilandelwa ziiveki ze-8, ezenza ukuhlaziywa kokukhutshwa kwangaphambili kweChrome 96. Ukukhutshwa okulandelayo kwe-Chrome 98 kuhlelwe ngoFebruwari 1st.

Utshintsho oluphambili kwiChrome 97:

• Kubasebenzisi abathile, umququzeleli usebenzisa i-interface entsha yokulawula idatha egcinwe kwicala lomkhangeli ("chrome://settings/content/all"). Umahluko ophambili we-interface entsha kugxininiso lwayo ekusekweni kweemvume kunye nokucima zonke iiCookies zesayithi kanye, ngaphandle kokukwazi ukujonga ulwazi oluthe kratya malunga neCookies nganye kunye nokucima ngokukhetha iiCookies. NgokukaGoogle, ukufikelela kulawulo lweeKuki ezizimeleyo zomsebenzisi oqhelekileyo ongabuqondiyo ubucukubhede bophuhliso lwewebhu kunokukhokelela ekuphazamisekeni okungalindelekanga ekusebenzeni kweziza ngenxa yotshintsho olungenangqondo kwiiparamitha zomntu ngamnye, kunye nokukhubaza ubumfihlo ngengozi. iindlela zokukhusela zisebenze ngeeKuki. Kwabo bafuna ukukhohlisa iiKuki ezizimeleyo, kucetyiswa ukuba kusetyenziswe icandelo lolawulo lokugcina kwizixhobo zabaphuhlisi bewebhu (i-Applocation/Storage/Cookie).
• Kwibhloko enolwazi malunga nesiza, inkcazo emfutshane yendawo (umzekelo, inkcazo evela kwiWikipedia) iboniswa ukuba ukukhangela kunye nemowudi yokukhangela iyasebenza kwisethingi (inketho ethi "Yenza ukukhangela kunye nokukhangela ngcono").
• Inkxaso ephuculweyo yokuzalisa ngokuzenzekelayo iindawo kwiifom zewebhu. Iingcebiso ezinokhetho lokuzalisa ngokuzenzekela ngoku ziboniswa ngotshintsho oluncinci kwaye zibonelelwa ngeempawu zolwazi ukulungiselela umboniso olungele ngakumbi kunye nokuchongwa okubonakalayo koqhakamshelwano kunye nomhlaba ogcwaliswayo. Ngokomzekelo, i-icon yeprofayili yenza kucace ukuba ukugqiba okucetywayo okuzenzekelayo kuchaphazela iindawo ezinxulumene nedilesi kunye nolwazi loqhagamshelwano.
• Ukususwa okunikwe amandla kwabaphathi beprofayile yomsebenzisi kwinkumbulo emva kokuvala iifestile zesikhangeli ezihambelana nabo. Ngaphambili, iiprofayili zahlala zisesikhumbuzweni kwaye zaqhubeka nokwenza umsebenzi onxulumene nongqamaniso kunye nokwenziwa kwemibhalo eyongeziweyo yangasemva, nto leyo ekhokelele kwinkcitho engeyomfuneko yezixhobo kwiinkqubo ezisebenzisa iiprofayili ezininzi ngaxeshanye (umzekelo, iprofayile yeendwendwe kunye nokudibanisa kwiakhawunti kaGoogle. ). Ukongeza, ukucocwa ngokucokisekileyo ngakumbi kwedatha eseleyo ngelixa usebenza neprofayili kuqinisekiswa.
• Iphepha eliphuculweyo elinesetingi zenjini yokukhangela ("Useto>Lawula iinjini zokukhangela"). Ukusebenza okuzenzekelayo kweenjini, ulwazi malunga nokunikezelwa xa kuvulwa isayithi ngeskripthi se-OpenSearch, ivaliwe - ii-injini ezintsha zokuphendula imibuzo yokukhangela kwibar yedilesi ngoku kufuneka zisebenze ngesandla kwizicwangciso (iinjini zangaphambili ezisebenza ngokuzenzekelayo ziya kuqhubeka sebenza ngaphandle kotshintsho).
• Ukuqala nge-17 kaJanuwari, iVenkile yeWebhu yeChrome ayisayi kuphinda izamkele izongezo ezisebenzisa inguqulelo XNUMX ye-Chrome manifest, kodwa abaphuhlisi bezongezo ezifakwe ngaphambili basazokwazi ukupapasha uhlaziyo.
• Inkxaso yovavanyo eyongeziweyo yenkcazo ye-WebTransport, echaza iprotocol kunye ne-JavaScript API yokuthumela kunye nokufumana idatha phakathi kwesikhangeli kunye neseva. Umjelo wonxibelelwano uhlelwe phezu kwe-HTTP/3 usebenzisa i-QUIC protocol njengothutho. I-WebTransport ingasetyenziselwa endaweni ye-WebSockets mechanism, inikezela ngeempawu ezongezelelweyo ezifana nokuhanjiswa kwe-multi-stream, imijelo engabonakaliyo, ukuhanjiswa kwe-out-of-order, iindlela ezithembekileyo nezingathembekanga. Ukongeza, iWebTransport ingasetyenziswa endaweni yeServer Push mechanism, leyo uGoogle uyishiyileyo kwiChrome.
• Iindlela ze-FindLast kunye ne-FindLastIndex zongezwe kwizinto ze-Array kunye ne-TypedArrays JavaScript, ekuvumela ukuba ukhangele izinto ezinesiphumo sesiphumo esihambelana nesiphelo soluhlu. [1,2,3,4].findLast((el) => el % 2 === 0) // → 4 (into yokugqibela elinganayo)
• Ivaliwe (akukho uphawu "luvuliweyo") Iimpawu zeHTML , ngoku ziyakhangeleka kwaye ziyaqhagamshelwa, kwaye zandiswa ngokuzenzekelayo xa usebenzisa uphendlo lwephepha kunye nokukhangela kweqhekeza (ScrollToTextFragment).
• Izithintelo zoMgaqo-nkqubo woKhuseleko loMxholo (CSP) kwizihloko zeempendulo zeseva ngoku zisebenza kubasebenzi abazinikeleyo, ababephathwa ngaphambili njengamaxwebhu ahlukeneyo.
• Isicelo esicacileyo segunya lokukhuphela naziphi na izibonelelo ezingaphantsi kuthungelwano lwangaphakathi sinikiwe - phambi kokufikelela kuthungelwano lwangaphakathi okanye ihostela yendawo, isicelo seCORS (Imvelaphi yeSibonelelo esiNqamkileyo) esinesihloko esithi “Fikelela-Ukulawula-Isicelo-Bucala- Uthungelwano: yinyaniso” ngoku ithunyelwe kwiseva yesayithi engundoqo ifuna ukuqinisekiswa komsebenzi ngokubuyisela i-header ethi "Finyelela-Ukulawula-Vumela-Inethiwekhi yaBucala: yinyani".
• Yongeza ipropathi ye-CSS yokwenziwa kwefonti, ekuvumela ukuba ulawule ukuba ngaba isikhangeli singenza ukudibanisa izimbo zamagama ezilahlekileyo (oblique, ngqindilili kunye necap-encinci) ezingekho kusapho olukhethiweyo.
• Kutshintsho lweCSS, umbono () umsebenzi usebenzisa 'akukho nanye' iparamitha, ephathwa njengexabiso elingenasiphelo xa uququzelela uphiliso.
• I-Permissions-Policy (Umgaqo-nkqubo weNgcaciso) i-HTTP header, esetyenziselwa ukunikezela igunya kunye nokuvumela iimpawu eziphambili, ngoku zixhasa ixabiso lebhodibhodi ye-keyboard, evumela ukusetyenziswa kwe-Keyboard API. Indlela ye-Keyboard.getLayoutMap () iphunyeziwe, ekuvumela ukuba umise ukuba leliphi na isitshixo esicinezelweyo, uthathela ingqalelo ibhodi yezitshixo ezahlukeneyo (umzekelo, isitshixo sicinezelwe ubeko lwesiRashiya okanye lwesiNgesi).
• Indlela eyongeziweyo ye-HTMLScriptElement.supports (), edibanisa inkcazo yezinto ezintsha ezifumanekayo kwindawo "yeskripthi", umzekelo, ungafumana uluhlu lwamaxabiso axhaswayo kuphawu "lohlobo".
• Inkqubo yokwenza imigca emitsha ibe yesiqhelo xa kufakwa iifom zewebhu iye yahambelana neenjini zeGecko kunye neWebKit. Ukuqhelaniswa kwe-linefeeds kunye nembuyekezo yemoto (ukutshintsha / r kunye / n nge \ r\n) kwiChrome ngoku kwenziwa kwinqanaba lokugqibela kunokuba ekuqaleni kokuhanjiswa kwefom (oko kukuthi abaqhubeki abaphakathi basebenzisa into yeFormData baya kubona idatha njenge yongezwe ngumsebenzisi, kwaye hayi ngendlela eqhelekileyo).
• Ukuthiywa kwamagama epropathi kuye kwalungelelaniswa kwi-API yeeNgcebiso zoMthengi, ephuhliswayo njengokutshintshwa kwesihloko soMsebenzisi-Agent kwaye ikuvumela ukuba ukhethe ngokukhetha idatha malunga nomkhangeli zincwadi othile kunye neeparameters zenkqubo (uguqulelo, iqonga, njl. njl.) kuphela emva kokuba isicelo somncedisi. Iimpahla ngoku zicacisiwe ngesimaphambili "sec-ch-", umzekelo, sec-ch-dpr, sec-ch-width, sec-ch-viewport-width, sec-ch-device-memory, sec-ch-rtt. , sec- ch-downlink kunye ne-sec-ch-ect.
• Isigaba sesibini sokuyeka inkxaso ye-WebSQL API isetyenzisiwe, ukufikelela kuyo ukusuka kwizikripthi zomntu wesithathu ngoku kuya kuvinjelwa. Kwixesha elizayo, siceba ukunciphisa ngokuthe ngcembe inkxaso ye-WebSQL ngokupheleleyo, kungakhathaliseki ukuba yintoni umxholo wokusetyenziswa. Injini yeWebSQL isekwe kwikhowudi yeSQLite kwaye ingasetyenziswa ngabahlaseli ukuxhaphaza ubuthathaka kwiSQLite.
• Kwiqonga leWindows, indibano enokuhlolwa kokuhamba kwengqibelelo yokubulawa (CFG, Control Flow Guard) ibandakanyiwe, ukuthintela iinzame zokufaka ikhowudi kwinkqubo yeChrome. Ukongeza, ukwahlulwa kwebhokisi yesanti ngoku kusetyenziswe kwiinkonzo zenethiwekhi ezisebenza kwiinkqubo ezahlukeneyo, ukunciphisa amandla ekhowudi kwezi nkqubo.
• I-Chrome ye-Android iquka indlela yokuhlaziya ngokuguquguqukayo ilog yezatifikethi ezikhutshiweyo nezirhoxisiweyo (iSitifiketi sokuNgafihlisi ekuhleni), ebifudula yenzeka kwimirhumo yeenkqubo zedesktop.
• Uphuculo lwenziwe kwizixhobo zabaphuhlisi bewebhu. Inkxaso yovavanyo yongqamaniso lwezicwangciso ze-DevTools phakathi kwezixhobo ezahlukeneyo ziphunyeziwe. Iphaneli entsha yoMrekhoda yongezwe, apho unokurekhoda, udlale kwaye uhlalutye izenzo zabasebenzisi kwiphepha.

  Xa ubonisa iimpazamo kwikhonsoli yewebhu, iinombolo zekholamu ezinxulumene nengxaki ziyaboniswa, ezilungele ukulungisa iingxaki kwikhowudi yeJavaScript encinci. Uluhlu lwezixhobo ezinokuthi zilinganiswe ukuvavanya umboniso wephepha kwizixhobo eziphathwayo zihlaziywe. Kujongano lokuhlela iibhloko zeHTML (Hlela njengeHTML), ukuqaqambisa isintaksi kunye nokukwazi ukugqibezela igalelo ngokuzenzekelayo kongeziwe.

  

Ukongeza kwizinto ezintsha kunye nokulungiswa kwe-bug, inguqulelo entsha isusa ubuthathaka be-37. Uninzi lobuthathaka luchongiwe ngenxa yovavanyo oluzenzekelayo kusetyenziswa idilesi yeSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer kunye nezixhobo zeAFL. Olunye ubuthathaka lunikezelwe ubume bomcimbi obalulekileyo, okuvumela umntu ukuba adlule kuwo onke amanqanaba okhuseleko lomkhangeli zincwadi kwaye aphumeze ikhowudi kwisistim, ngaphandle kwendawo yebhokisi yesanti. Iinkcukacha malunga nokuba semngciphekweni obalulekileyo (CVE-2022-0096) ayikachazwanga kuphela ukuba inxulumene nokufikelela kwindawo yememori esele ikhululiwe kwikhowudi yokusebenza nokugcinwa kwangaphakathi (I-API yokuGcina).

Njengenxalenye yenkqubo yokuhlawula imbuyekezo yemali yokufumanisa ubuthathaka ngokukhutshwa kwangoku, uGoogle uhlawule amabhaso angama-24 axabisa i-$54 lamawaka (amabhaso amathathu e-$10000, amabhaso amabini e-$5000, ibhaso le-$4000 enye, amabhaso amathathu e-$3000 kunye nebhaso elilodwa le-$1000). Ubungakanani bemivuzo ye-14 ayikachazwa.

umthombo: opennet.ru