Ukukhutshwa kweChrome 91

I-Google ibonise ukukhululwa kwesiphequluli sewebhu se-Chrome 91. Ngexesha elifanayo, ukukhululwa okuzinzile kweprojekthi yeChromium yamahhala, esebenza njengesiseko seChrome, iyafumaneka. Umkhangeli weChrome uhlukaniswa ngokusetyenziswa kweempawu zeGoogle, ubukho benkqubo yokuthumela izaziso kwimeko yokuphazamiseka, iimodyuli zokudlala umxholo wevidiyo okhuselweyo (DRM), inkqubo yokufaka uhlaziyo ngokuzenzekelayo, kunye nokuhambisa iiparamitha zeRLZ xa ukhangela. Ukukhutshwa okulandelayo kweChrome 92 kucwangciselwe i-20 kaJulayi.

Utshintsho oluphambili kwiChrome 91:

• Kuphunyezwe ukukwazi ukumisa uphumezo lweJavaScript kwiqela lethebhu elichithiweyo. I-Chrome 85 yazisa inkxaso yokulungelelanisa iithebhu zibe ngamaqela anokuthi adityaniswe nombala othile kunye nelebhile. Xa ucofa kwileyibhile yeqela, iithebhu ezinxulunyaniswa nayo ziyawa kwaye ileyibhile enye isala endaweni (ukucofa kwileyibhile kwakhona kuvula iqela). Ekukhutshweni okutsha, ukwenzela ukunciphisa umthwalo we-CPU kunye nokugcina amandla, umsebenzi kwiithebhu ezincinci unqunyanyisiwe. Okungafaniyo kwenziwa kuphela kwiithebhu ezidlala isandi, sebenzisa i-Web Locks okanye i-IndexedDB API, qhagamshela kwisixhobo se-USB, okanye ubambe ividiyo, isandi, okanye umxholo wefestile. Utshintsho luya kukhutshwa ngokuthe ngcembe, kuqala ngepesenti encinci yabasebenzisi.
• Ibandakanywe inkxaso yendlela yesivumelwano esingundoqo esixhathisa amandla akhohlakeleyo kwiikhomputha ze-quantum. Iikhompyuter ze-quantum zikhawuleza kakhulu ekusombululeni ingxaki yokubola inani lendalo kwizinto eziphambili, eziphantsi kwe-algorithms ye-asymmetric encryption yanamhlanje kwaye ayinakusonjululwa ngempumelelo kwiiprosesa zeklasiki. Ukusetyenziswa kwi-TLSv1.3, i-plugin ye-CECPQ2 (i-Combined Elliptic-Curve kunye ne-Post-Quantum 2) ifakiwe, idibanisa indlela ye-X25519 engundoqo yokutshintshiselana kunye neskimu se-HRSS esekelwe kwi-algorithm ye-NTRU Prime, eyenzelwe i-cryptosystems ye-post-quantum.
• Inkxaso yeeprothokholi ze-TLS 1.0 kunye ne-TLS 1.1, eziye zaphelelwa lixesha yikomiti ye-IETF (i-Internet Engineering Task Force), iyekiswe ngokupheleleyo. Kubandakanya ukubuyisela i-TLS 1.0/1.1 ngokutshintsha umgaqo-nkqubo we-SSlVersionMin ususiwe.
• Iindibano zeqonga leLinux ziquka ukusetyenziswa kwemodi ye "DNS phezu kwe-HTTPS" (i-DoH, i-DNS phezu kwe-HTTPS), eyaziswa ngaphambili kubasebenzisi beWindows, macOS, ChromeOS kunye ne-Android. I-DNS-over-HTTPS iya kwenziwa isebenze ngokuzenzekelayo kubasebenzisi abanoseto lwabo luchaza ababoneleli be-DNS abaxhasa obu buchwepheshe (kwi-DNS-over-HTTPS umboneleli ofanayo usetyenziswa njenge-DNS). Umzekelo, ukuba umsebenzisi une-DNS 8.8.8.8 echazwe kwiisetingi zenkqubo, ngoko inkonzo ye-DNS-over-HTTPS kaGoogle (“https://dns.google.com/dns-query”) iya kuvulwa kwiChrome ukuba iDNS yi-1.1.1.1 , ngoko inkonzo ye-DNS-over-HTTPS Cloudflare ("https://cloudflare-dns.com/dns-query"), njl.
• I-Port 10080, esetyenziswa kwi-backup ye-Amanda kunye ne-VMWare vCenter, yongezwe kuluhlu lwamazibuko othungelwano oluthintelweyo. Ngaphambili, izibuko 69, 137, 161, 554, 1719, 1720, 1723, 5060, 5061 kunye ne-6566 zazisele zivaliwe. Kwizibuko kuluhlu olumnyama, ukuthunyelwa kwe-HTTP, i-HTTPS kunye nezicelo ze-FTP zivaliwe ukuze kukhuselwe ngokuchasene ne-NAT yokuhlasela isiliphu. , evumela xa ivuliwe iphepha lewebhu elilungiselelwe ngokukodwa umhlaseli kwisikhangeli ukuseka uxhulumaniso lwenethiwekhi ukusuka kumncedisi womhlaseli kuyo nayiphi na i-port ye-UDP okanye ye-TCP kwinkqubo yomsebenzisi, nangona ukusetyenziswa koluhlu lwedilesi yangaphakathi (192.168.xx, 10) .xxx).
• Kunokwenzeka ukuqwalasela ukuqaliswa ngokuzenzekelayo kwezicelo zewebhu ezizimeleyo (i-PWA - i-Progressive Web Apps) xa umsebenzisi engena kwisistim (iWindows kunye ne-macOS). I-Autorun iqwalaselwe kwiphepha le-chrome://apps. Umsebenzi ngoku uyavavanywa kwipesenti encinci yabasebenzisi, kwaye kwabanye kufuna uvule i-"chrome://flags/#enable-desktop-pwas-run-on-os-login" useto.
• Njengenxalenye yomsebenzi wokuhambisa isikhangeli ukuba sisebenzise isigama esibandakanyayo (inclusive terminology), ifayile ethi "master_preferences" iye yanikwa elinye igama elithi "initial_preferences". Ukugcina ukuhambelana, inkxaso ye-"master_preferences" iya kuhlala kwi-browser ixesha elithile. Ngaphambili, isikhangeli sele siyilahlile ukusetyenziswa kwamagama "uluhlu olumhlophe", "uluhlu olumnyama" kunye "nomdabu".
• Imowudi yokuKhangela ngokuKhuselekileyo, eyenza iitshekhi ezongezelelweyo ukukhusela kwi-phishing, umsebenzi onobungozi kunye nezinye izoyikiso kwiWebhu, iquka ukukwazi ukuthumela iifayile ezikhutshelweyo zokuskena kwicala likaGoogle. Ukongeza, Ukhangelo oluKhuselekileyo oluKhuselekileyo lusebenzisa i-accounting yeethokheni ezibotshelelwe kwiakhawunti kaGoogle xa kuchongwa iinzame zokurhwaphiliza, kunye nokuthumela amaxabiso eentloko zeReferrer kwiiseva zikaGoogle ukujonga ukuthunyelwa kwisiza esiyingozi.
• Kuhlelo lweqonga le-Android, ukuyilwa kwezinto zefom yewebhu kuphuculwe, eziye zaphuculwa ukuba zisetyenziswe kwizikrini zokuthintela kunye neenkqubo zabantu abakhubazekileyo (kwiinkqubo zedeskithophu, uyilo lwenziwe ngokutsha kwi-Chrome 83). Injongo yokulungiswa kwakhona yayikukudibanisa ukuyila kwezinto zefom kunye nokuphelisa ukungahambelani kwesitayela - ngaphambili, ezinye iifom zefom zenzelwe ngokuhambelana nezixhobo ze-interface yenkqubo yokusebenza, kwaye ezinye ngokuhambelana neendlela ezithandwa kakhulu. Ngenxa yoku, izinto ezahlukeneyo zazifanelekile ngokwahlukileyo kwizikrini zokuchukumisa kunye neenkqubo zabantu abakhubazekileyo.
• Kongezwe uluvo loluvo lomsebenzisi oluboniswa xa kuvulwa iisetingi zeSandbox yaBucala (chrome://settings/privacySandbox).
• Xa usebenzisa inguqulo ye-Android yeChrome kwiiPC zethebhulethi ezinezikrini ezinkulu, isicelo senzelwe inguqulo ye-desktop yesayithi, kwaye kungekhona i-edition yezixhobo eziphathwayo. Ungayitshintsha indlela yokuziphatha usebenzisa i-"chrome://flags/#request-desktop-site-for-tablets".
• Ikhowudi yokunikezela ngeetafile iye yaphinda yasetyenziswa, eyasivumela ukuba sisombulule iingxaki ngokungahambisani nokuziphatha xa sibonisa iitafile kwi-Chrome kunye neFirefox / Safari.
• Ukusetyenzwa kwezatifikethi zeseva evela kwabasemagunyeni bezatifikethi baseSpain iCamerfirma iye yanqunyanyiswa ngenxa yeziganeko eziqhubekayo ukususela ngo-2017 ezibandakanya ukuphulwa kwezatifikethi. Inkxaso yezatifikethi zabaxumi iyagcinwa; ukubhloka kusebenza kuphela kwizatifikethi ezisetyenziswa kwiziza ze-HTTPS.
• Siyaqhubeka nokuphumeza inkxaso yokwahlulwa kwenethiwekhi ukuze sikhusele kwiindlela zokulandelela iintshukumo zabasebenzisi phakathi kweesayithi ezisekelwe kwiziphawuli zokugcina kwiindawo ezingajoliswanga kugcino olusisigxina lolwazi (“Supercookies”). Ngenxa yokuba izibonelelo ezigciniweyo zigcinwe kwindawo yamagama eqhelekileyo, kungakhathaliseki ukuba yiyiphi i-domain evela kuyo, isayithi enye inokugqiba ukuba enye indawo ilayisha izixhobo ngokujonga ukuba loo vimba i-cache. Ukhuseleko lusekelwe ekusebenziseni ulwahlulo lwenethiwekhi (i-Network Partitioning), umongo wayo kukongeza kwi-cache ekwabelwana ngayo ukubophelela okongeziweyo kweerekhodi kwisizinda apho kuvulwa khona iphepha eliphambili, elinqanda i-cache ye-cache yokulandela umkhondo wemibhalo kuphela. kwisiza sangoku (iscript esisuka kwi-iframe asizukwazi ukujonga ukuba uvimba wakhutshelwa kwenye indawo).

  Ixabiso lokwahlula liyancipha ekusebenzeni kwe-caching, okukhokelela ekunyuseni okuncinci kwixesha lokulayisha iphepha (ubuninzi be-1.32%, kodwa kwi-80% yeendawo nge-0.09-0.75%). Ukuvavanya imo yokwahlulahlula, ungasebenzisa isikhangeli ngokhetho “—enable-features=PartitionConnectionsByNetworkIsolationKey, PartitionExpectCTStateByNetworkIsolationKey, PartitionHttpServerPropertiesByNetworkIsolationKey, PartitionNelAndReportingByLSKessionIsolationIsolation CacheB yNetworkIsolationKey".

• Ukongezwa kwangaphandle kwe-REST API VersionHistory (https://versionhistory.googleapis.com/v1/chrome), apho unokufumana ulwazi malunga neenguqulelo zeChrome ngokumalunga namaqonga kunye namasebe, kunye nembali yokuhlaziya isiphequluli.
• Kwi-iframes elayishwe kwimida ngaphandle kwendawo yephepha lesiseko, ukuboniswa kwe-JavaScript dialogs alert (), qinisekisa () kunye ne-prompt () akuvumelekanga, okuya kukhusela abasebenzisi kwiinzame zeskripthi somntu wesithathu ukubonisa imiyalezo phantsi cinga ukuba isaziso siboniswe yisayithi engundoqo.
• I-WebAssembly SIMD API iye yazinziswa kwaye inikezelwa ngokungagqibekanga ekusebenziseni imiyalelo ye-vector ye-SIMD kwizicelo ezifomathiweyo zeWebAssembly. Ukuqinisekisa ukuzimela kweqonga, inika uhlobo olutsha lwe-128-bit olunokumela iindidi ezahlukeneyo zedatha epakishweyo, kunye nemisebenzi emininzi ye-vector esisiseko yokucubungula idatha epakishweyo. I-SIMD ikuvumela ukuba ukwandise imveliso ngokuthelekisa ukusetyenzwa kwedatha kwaye iya kuba luncedo xa uqulunqa ikhowudi yemveli kwiWebAssembly.
• Ii-API ezininzi ezintsha zongezwe kwimowudi yoLingo lweMvelaphi (iimpawu zovavanyo ezifuna ukusebenza ngokwahlukileyo). Uvavanyo lwemvelaphi luthetha ukukwazi ukusebenza kunye ne-API echaziweyo kwizicelo ezikhutshelwe kwi-localhost okanye i-127.0.0.1, okanye emva kokubhalisa kunye nokufumana ithokheni ekhethekileyo esebenzayo ixesha elilinganiselweyo kwindawo ethile.
  • I-WebTransport yiprothokholi kunye ehamba neJavaScript API yokuthumela kunye nokufumana idatha phakathi kwesikhangeli kunye neseva. Umjelo wonxibelelwano uququzelelwe phezulu kwe-HTTP / 3 usebenzisa i-QUIC protocol njengothutho, leyo, ngokuphindaphindiweyo, i-add-on kwi-protocol ye-UDP exhasa i-multiplexing yoxhulumaniso oluninzi kunye nokubonelela ngeendlela zokubethela ezilinganayo ne-TLS / SSL.

    I-WebTransport inokusetyenziswa endaweni ye-WebSockets kunye ne-RTCDataChannel iindlela, ezinikezela ngeempawu ezongezelelweyo ezifana nokuhanjiswa kwe-multi-stream, imijelo engabonakaliyo, ukuhanjiswa ngaphandle kwe-oda, iindlela ezithembekileyo nezingathembekanga. Ukongeza, iWebTransport ingasetyenziswa endaweni yeServer Push mechanism, leyo uGoogle uyishiyileyo kwiChrome.

  • I-interface echazayo yokuchaza amakhonkco kwizicelo zewebhu ezizimeleyo (i-PWAs), enikwe amandla usebenzisa i-capture_links parameter kwi-manifest yesicelo sewebhu kunye nokuvumela iisayithi ukuba zivule ngokuzenzekelayo ifestile entsha ye-PWA xa ikhonkco lesicelo licofa okanye litshintshele kwimodi yefestile enye, iyafana nezicelo eziphathwayo.
  • Yongeza i-API ye-WebXR Plane Detection, enika ulwazi malunga neendawo ezicwangcisiweyo kwindawo ye-3D ebonakalayo. I-API ekhankanyiweyo yenza kube lula ukunqanda ukusetyenzwa okunzulu kobutyebi bedatha efunyenwe ngomnxeba MediaDevices.getUserMedia (), kusetyenziswa ukuphunyezwa kobunini bealgorithms yombono wekhompyuter. Masikukhumbuze ukuba iWebXR API ikuvumela ukuba udibanise umsebenzi kunye neeklasi ezahlukeneyo zezixhobo zokwenyani, ukusuka kwizigcina-ntloko ze-3D ezimileyo ukuya kwizisombululo ezisekelwe kwizixhobo eziphathwayo.
• Inkxaso yokusebenza kunye neWebSockets ngaphezulu kweHTTP/2 (RFC 8441) iphunyeziwe, esebenzayo kuphela kwizicelo ezikhuselekileyo kwiWebSockets naphambi konxibelelwano olusele lusekiwe lweHTTP/2 kunye nomncedisi, othe wabhengeza inkxaso ye “WebSockets ngaphezulu. HTTP/2” ulwandiso.
• Imida ekuchanekeni kwamaxabiso esibali-xesha aveliswe kukufowunela ukusebenza.ngoku () ayahambelana kuwo onke amaqonga axhaswayo kwaye avumele ukubakho kokwahlula abaphangi kwiinkqubo ezahlukeneyo. Ngokomzekelo, kwiinkqubo zedeskithophu, ukuchaneka xa kucutshungulwa kwiimeko ezingekho zodwa kuye kwancitshiswa ukusuka kwi-5 ukuya kwi-100 microseconds.
• Ulwakhiwo lweDesktop ngoku lubandakanya ukukwazi ukufunda iifayile kwibhodi eqhotyoshwayo (ukubhala iifayile kwibhodi eqhotyoshwayo kusathintelwe). umsebenzi weasync kwiNcamathelisa(e) {vumela ifayile = e.clipboardData.files[0]; vumela imixholo = ilinde ifayile. okubhaliweyo (); }
• I-CSS isebenzisa umthetho we-@counter-style, okuvumela ukuba uchaze isimbo sakho sezixhobo zokubala kunye neelebhile kuluhlu olunamanani.
• I-CSS pseudo-class ":host()" kunye ":host-context()" yongeze ukukwazi ukugqitha amaxabiso omnye wabakhethi bekhompawundi () ) ukongeza kuluhlu lwabakhethi ( ).
• I-interface eyongeziweyo ye-GravitySensor yokumisela i-volumetric (ii-axes ezintathu ezilungelelanisiweyo) idatha evela kwinzwa yomxhuzulane.
• UFikelelo lweNkqubo yeFayile API ibonelela ngokukwazi ukuchaza iingcebiso zokukhetha igama lefayile kunye nolawulo olunikezelweyo kwincoko yababini ngokwenza okanye ukuvula ifayile.
• Ii-iframes ezilayishwe kwezinye iindawo zivunyelwe ukufikelela kwi-WebOTP API ukuba umsebenzisi unika iimvume ezifanelekileyo. IWebOTP ikuvumela ukuba ufunde iikhowudi zokuqinisekisa ngexesha elinye ezithunyelwe ngeSMS.
• Ivunyelwe ukwabelana ngofikelelo kwiinkcukacha zeesayithi ezidityaniswe kusetyenziswa indlela ye-DAL (iDigital Asset Links), evumela usetyenziso lwe-Android ukuba lunxulunyaniswe neesayithi ukwenza lula ukungena.
• Abasebenzi benkonzo bavumela ukusetyenziswa kweemodyuli zeJavaScript. Xa ukhankanya uhlobo 'lwemodyuli' xa ubiza umakhi, izikripthi ezikhankanyiweyo ziya kulayishwa ngendlela yeemodyuli kwaye zifumaneke ukuba zingeniswe kumxholo womsebenzi. Inkxaso yemodyuli yenza kube lula ukwabelana ngekhowudi kuwo wonke amaphepha ewebhu kunye nabasebenzi benkonzo.
• IJavaScript ibonelela ngokukwazi ukujonga ubukho bemihlaba yabucala kwinto usebenzisa i "#foo in obj" isivakalisi. iklasi A { static test(obj) {console.log(#foo in obj); } #foo = 0; } Uvavanyo(entsha A()); // inyaniso A.test({}); // bubuxoki
• IJavaScript ngokungagqibekanga ivumela ukusetyenziswa kwegama elingundoqo lokulinda kwiimodyuli kwinqanaba eliphezulu, elivumela ukuba iifowuni ze-asynchronous zidibaniswe ngokufanelekileyo kwinkqubo yokulayisha imodyuli kwaye igweme ukuyifaka "kwi-async function". Umzekelo, endaweni ye (async function() {wait Promise.resolve(console.log('test')); }()); ngoku ungabhala ulinde Promise.resolve(console.log('test'));
• I-injini ye-V8 JavaScript iphucule ukusebenza kakuhle kwe-template caching, eye yandisa isantya sokudlula uvavanyo lwe-Speedometer4.5-FlightJS nge-2%.
• Inxalenye enkulu yophuculo lwenziwe kwizixhobo zabaphuhlisi bewebhu. Imowudi entsha yomhloli weMemori yongezwe, ibonelela ngezixhobo zokuvavanya idatha yeArrayBuffer kunye nememori yeWasm.

  Isalathisi sokusebenza kwesishwankathelo songeziwe kwiphaneli yoMsebenzi, ekuvumela ukuba ugwebe ukuba isayithi lifuna ukulungiswa okanye cha.

  

  Umboniso wemifanekiso kwi-Elements panel kunye ne-Network Analysis panel zibonelela ngolwazi malunga nomlinganiselo wembonakalo yomfanekiso, iinketho zonikezelo, kunye nobukhulu befayile.

  

  Kwiphaneli yokuhlola inethiwekhi, ngoku kunokwenzeka ukuba utshintshe amaxabiso amkelekileyo omxholo we-Encoding header.

  

  Kwiphaneli yesitayile, ngoku ungajonga ngokukhawuleza ixabiso elibaliweyo xa uhamba ngeeparamitha zeCSS ngokukhetha “Jonga ixabiso elibaliweyo” kwimenyu yomxholo.

  

Ukongeza kwizinto ezintsha kunye nokulungiswa kwebug, inguqulelo entsha isusa ubuthathaka obungama-32. Uninzi lobuthathaka luchongiwe ngenxa yovavanyo oluzenzekelayo kusetyenziswa idilesi yeSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer kunye nezixhobo zeAFL. Akukho zingxaki zibalulekileyo zichongiwe eziya kuvumela umntu ukuba adlule kuwo onke amanqanaba okhuseleko lomkhangeli zincwadi kwaye enze ikhowudi kwisistim ngaphandle kwendawo yebhokisi yesanti. Njengenxalenye yenkqubo yokuhlawula amabhaso ayimali ngokufumanisa ubuthathaka ngokukhutshwa kwangoku, uGoogle uhlawule amabhaso angama-21 axabisa iidola ezingama-92000 (ibhaso elinye lama-20000 eedola, ibhaso le-$15000 enye, iimbasa ezine zeedola ezingama-7500, amabhaso amathathu eedola ezingama-5000, amabhaso amathathu e-$3000, amabhaso amabini e-$1000 $500). Ubungakanani bemivuzo emi-5 ayikacaciswa.

umthombo: opennet.ru