Ukukhutshwa kweChrome 107

I-Google ivule ukukhululwa kwesiphequluli sewebhu se-Chrome 107. Ngelo xesha, ukukhululwa okuzinzile kweprojekthi yeChromium yamahhala, esebenza njengesiseko seChrome, iyafumaneka. Isikhangeli seChrome sihluke kwiChromium ekusebenziseni iilogo zeGoogle, ubukho benkqubo yokuthumela izaziso kwimeko yokuphazamiseka, iimodyuli zokudlala umxholo wevidiyo okhuselweyo wekopi (DRM), inkqubo yokufaka uhlaziyo ngokuzenzekelayo, ivumela iSandbox ngokusisigxina. , inikezela ngezitshixo kwiGoogle API kunye nokuthumela iRLZ- xa uzikhangelwa. Kwabo bafuna ixesha elingakumbi lokuhlaziya, i-Extended Stable branch ixhaswa ngokwahlukeneyo, ilandelwa ziiveki ezisi-8. Ukukhutshwa okulandelayo kweChrome 108 kucwangciselwe i-29 kaNovemba.

Utshintsho oluphambili kwiChrome 107:

  • Inkxaso eyongeziweyo ye-ECH (i-Encrypted Client Hello) indlela, eqhubeleka nophuhliso lwe-ESNI (Isalathiso seGama leseva Efihliweyo) kwaye isetyenziselwa ukufihla ulwazi malunga neeparamitha zeseshoni ye-TLS, njengegama lesizinda eliceliweyo. Umahluko ophambili phakathi kwe-ECH kunye ne-ESNI kukuba endaweni yoguqulelo oluntsonkothileyo kwinqanaba lemihlaba nganye, i-ECH ifihla umyalezo wonke we-TLS ClientMolo, ekuvumela ukuba uthintele ukuvuza kwiindawo ezingagqunywanga yi-ESNI, umzekelo, i-PSK (Kwabelwane Kwangaphambili). Key) indawo. I-ECH iphinda isebenzise irekhodi ye-HTTPSSVC ye-DNS endaweni yerekhodi ye-TXT ukuhambisa ulwazi olungundoqo loluntu, kwaye isebenzisa ukubethelwa okuqinisekisiweyo kokuphela ukuya ekupheleni ngokusekelwe kwi-Hybrid Public Key Encryption (HPKE) indlela yokufumana kunye nokubethela isitshixo. Ukulawula ukuba i-ECH yenziwe yasebenza, i-"chrome://flags#encrypted-client-hello" isicwangciso senziwe.
  • Inkxaso yehardware yokwenziwa kwekhowudi kwividiyo ekhawulezileyo kwifomathi ye-H.265 (HEVC) yenziwe yasebenza.
  • Inqanaba lesihlanu lokunciphisa ulwazi kwi-User-Agent HTTP header kunye ne-JavaScript parameters navigator.userAgent, navigator.appVersion kunye ne-navigator.platform isetyenzisiwe, iphunyezwe ukunciphisa ulwazi olungasetyenziselwa ukuchonga umsebenzisi. I-Chrome 107 iye yanciphisa iqonga kunye nolwazi lweprosesa kumgca we-Agent-Agent kubasebenzisi be-desktop, kwaye iqhwale imixholo ye-navigator.platform JavaScript parameter. Utshintsho lubonakala kuphela kwiinguqulelo zeqonga leWindows, apho uguqulelo lweqonga elithile lutshintshwa lube yi "Windows NT 10.0". Kwi-Linux, umxholo weqonga kwi-Arhente yoMsebenzisi awutshintshanga.

    Ngaphambili, iinombolo ze-MINOR.BUILD.PATCH ezenze i-browser version zitshintshwe ngo-0.0.0. Kwixesha elizayo, kucetywayo ukushiya kuphela ulwazi malunga negama lesikhangeli, inguqu enkulu yesiphequluli, iqonga kunye nohlobo lwesixhobo (ifowuni yeselula, iPC, ithebhulethi) kwisihloko. Ukufumana idatha eyongezelelweyo, njengenguqu echanekileyo kunye nedatha yeqonga eyandisiweyo, kufuneka usebenzise i-API yeeNcebiso ze-Agent Agent. Kwiisayithi ezingenalo ulwazi olutsha olwaneleyo kwaye azikakulungeli ukutshintshela kwiiNgcebiso zoMxumi woMxumi, kude kube ngoMeyi 2023 banethuba lokubuyisela uMsebenzi opheleleyo.

  • Inguqulelo ye-Android ayisaxhasi iqonga le-Android 6.0; isikhangeli ngoku sifuna ubuncinci be-Android 7.0.
  • Uyilo lojongano lokulandelela ubume bokhuphelo lutshintshiwe. Esikhundleni somgca ongezantsi kunye nedatha kwinkqubela phambili yokukhuphela, isalathisi esitsha songeziwe kwiphaneli enebha yedilesi; xa ucofa kuyo, inkqubela phambili yokukhuphela iifayile kunye nembali enoluhlu lweefayile esele zikhutshiwe ziyaboniswa. Ngokungafaniyo nephaneli esezantsi, iqhosha lihlala liboniswa kwiphaneli kwaye likuvumela ukuba ufikelele ngokukhawuleza kwimbali yakho yokukhuphela. Ujongano olutsha okwangoku lunikezelwa ngokungagqibekanga kuphela kubasebenzisi abathile kwaye luya kwandiswa kubo bonke ukuba akukho ngxaki.
    Ukukhutshwa kweChrome 107
  • Kubasebenzisi bedesktop, kunokwenzeka ukungenisa amagama ayimfihlo agcinwe kwifayile kwifomethi ye-CSV. Ngaphambili, amagama agqithisiweyo ukusuka kwifayile ukuya kwisikhangeli ebenokugqithiselwa kuphela ngenkonzo passwords.google.com, kodwa ngoku oku kunokwenziwa nangoMphathi wePassword kaGoogle owakhelwe kwisikhangeli.
  • Emva kokuba umsebenzisi enze iprofayile entsha, i-prompt iboniswa ikukhuthaza ukuba wenze ulungelelwaniso kwaye uye kuseto, apho unokutshintsha igama leprofayile kwaye ukhethe umxholo wombala.
  • Uguqulelo lweqonga le-Android linikeza ujongano olutsha lokukhetha iifayile zeendaba zokulayisha iifoto kunye neevidiyo (endaweni yokuphunyezwa kwayo, i-interface ye-Android Media Picker isetyenziswa).
    Ukukhutshwa kweChrome 107
  • Ukurhoxiswa ngokuzenzekelayo kwemvume yokubonisa izaziso kunikezelwe kwiziza ezifunyenwe zithumela izaziso kunye nemiyalezo ephazamisana nomsebenzisi. Ngaphezu koko, kwiisayithi ezinjalo, izicelo zemvume yokuthumela izaziso ziye zanqunyanyiswa.
  • I-Screen Capture API yongeze iipropati ezintsha eziyelelene nokwabelana kwesikrini-selfBrowserSurface (ikuvumela ukuba ungabandakanyi ithebhu yangoku xa ufowunela getDisplayMedia()), Ukutshintsha umphezulu (ukuvumela ukufihla iqhosha lokutshintsha iithebhu) kunye nomboniso womphezulu (ukuvumela ukuba unqande ukwabelana ithebhu, ifestile, okanye isikrini).
  • Kongezwe ipropathi ye-renderBlockingStatus kwi-Performance API ukuchonga izixhobo ezibangela unikezelo lwephepha ukuba lume de lugqibe ukulayisha.
  • Ii-API ezininzi ezintsha zongezwe kwimowudi yoLingo lweMvelaphi (iimpawu zovavanyo ezifuna ukusebenza ngokwahlukileyo). Uvavanyo lwemvelaphi luthetha ukukwazi ukusebenza kunye ne-API echaziweyo kwizicelo ezikhutshelwe kwi-localhost okanye i-127.0.0.1, okanye emva kokubhalisa kunye nokufumana ithokheni ekhethekileyo esebenzayo ixesha elilinganiselweyo kwindawo ethile.
    • I-Declarative API PendingBeacon, ekuvumela ukuba ulawule ukuthunyelwa kwedatha engadingi mpendulo (ibhekoni) kumncedisi. I-API entsha ikuvumela ukuba unikeze ukuthunyelwa kwedatha enjalo kwisikhangeli, ngaphandle kwesidingo sokubiza imisebenzi yokuthumela ngexesha elithile, umzekelo, ukulungelelanisa ukuhanjiswa kwe-telemetry emva kokuba umsebenzisi evala iphepha.
    • Iimvume-uMgaqo-nkqubo (uMgaqo-nkqubo weNgxelo) isihloko se-HTTP, esisetyenziselwa ukunikezela igunya kunye nokuvumela iimpawu eziphambili, ngoku zixhasa ixabiso "lokukhulula", elinokusetyenziswa ukukhubaza abaphathi besiganeko "sokukhulula" kwiphepha.
  • Inkxaso yophawu lwe "rel" yongezwe kwithegi ye-, ekuvumela ukuba usebenzise iparamitha ye-"rel=noreferrer" ukukhangela kwiifom zewebhu ukuvala ukuhanjiswa kwesihloko esisentloko okanye "rel=noopener" ukukhubaza. ukucwangcisa i Window.opener impahla kwaye ukwalela ukufikelela kumxholo apho utshintsho lwenziwe.
  • I-CSS Grid yongeze inkxaso yokudibanisa igridi-template-iikholamu kunye neepropathi zemigca yegridi-template-ukubonelela ngenguqu egudileyo phakathi kwamazwe ahlukeneyo egridi.
  • Uphuculo lwenziwe kwizixhobo zabaphuhlisi bewebhu. Yongeza ukukwazi ukuqwalasela iihotkeys. Ukuphuculwa kokuhlolwa kwememori yeC / C ++ izinto zesicelo eziguqulelwe kwifomathi yeWebAssembly.

Ukongeza kwizinto ezintsha kunye nokulungiswa kwe-bug, inguqulelo entsha isusa ubuthathaka obuli-14. Uninzi lobuthathaka luchongiwe ngenxa yovavanyo oluzenzekelayo kusetyenziswa idilesi yeSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer kunye nezixhobo zeAFL. Akukho zingxaki zibalulekileyo zichongiwe eziya kuvumela umntu ukuba adlule kuwo onke amanqanaba okhuseleko lomkhangeli zincwadi kwaye enze ikhowudi kwisistim ngaphandle kwendawo yebhokisi yesanti. Njengenxalenye yenkqubo yokuhlawula imbuyekezo yemali ngokufumanisa ubuthathaka ngokukhutshwa kwangoku, uGoogle uhlawule amabhaso ali-10 kwisixa-mali sama-57 amawaka eedola zaseMelika (ibhaso elinye le-20000 yeedola, i-17000 yeedola kunye ne-7000 yeedola, amabhaso amabini e-3000 yeedola, amabhaso amathathu e-2000 yeedola kunye nelinye. ibhaso le-1000 yeedola). Ubungakanani bomvuzo omnye abukachazwa.

umthombo: opennet.ru

Yongeza izimvo