Ukukhutshwa kweChrome 93

I-Google ibonise ukukhululwa kwesiphequluli sewebhu se-Chrome 93. Ngelo xesha, ukukhululwa okuzinzile kweprojekthi yeChromium yamahhala, esebenza njengesiseko seChrome, iyafumaneka. Umkhangeli weChrome uhlukaniswa ngokusetyenziswa kweempawu zeGoogle, ubukho benkqubo yokuthumela izaziso kwimeko yokuphazamiseka, iimodyuli zokudlala umxholo wevidiyo okhuselweyo (DRM), inkqubo yokufaka uhlaziyo ngokuzenzekelayo, kunye nokuhambisa iiparamitha zeRLZ xa ukhangela. Ukukhutshwa okulandelayo kwe-Chrome 94 kucwangciselwe i-21 Septemba (uphuhliso luhanjiswe kwi-4-iveki yokukhulula umjikelezo).

Utshintsho oluphambili kwiChrome 93:

• Uyilo lwebhloko kunye nolwazi lwephepha (ulwazi lwephepha) luye lwaphuculwa, apho inkxaso yeebhloko ezifakwe kwindlwana iphunyeziwe, kwaye uluhlu oluhlayo olunamalungelo okufikelela lutshintshwe ngokutshintsha. Izintlu ziqinisekisa ukuba olona lwazi lubalulekileyo luboniswa kuqala. Utshintsho alwenziwanga lusebenze kubo bonke abasebenzisi; ukulwenza lusebenze, ungasebenzisa i-"chrome://flags/#page-info-version-2-desktop".
• Ngepesenti encinci yabasebenzisi, njengovavanyo, isalathisi soqhagamshelwano olukhuselekileyo kwibha yedilesi satshintshwa ngesimboli esingathathi hlangothi esingabangeli ukutolika kabini (isitshixo satshintshwa ngophawu "V"). Uqhagamshelwano olusekwe ngaphandle koguqulelo oluntsonkothileyo, isalathisi "esingakhuselekanga" siyaqhubeka nokuboniswa. Isizathu esikhankanyiweyo sokutshintsha isalathisi kukuba abasebenzisi abaninzi banxulumanisa isalathisi sokutshixa kunye nenyaniso yokuba umxholo wesayithi unokuthenjwa, kunokuba uwubone njengophawu lokuba unxibelelwano lufihliwe. Ngokujonga uphando lukaGoogle, kuphela i-11% yabasebenzisi abayiqondayo intsingiselo ye-icon ngesitshixo.
• Uluhlu lweethebhu ezisandula ukuvalwa ngoku libonisa imixholo yamaqela avaliweyo eethebhu (ngaphambili uluhlu lubonise nje igama leqela ngaphandle kokuchaza imixholo) ngokukwazi ukubuyisela zombini iqela kunye neethebhu nganye kwiqela kanye. Umsebenzi awuvunyelwanga kubo bonke abasebenzisi, ngoko unokufuna ukutshintsha i-"chrome://flags/#tab-restore-sub-menus" ukuseta ukuyivula.
• Kumashishini, useto olutsha luphunyeziwe: DefaultJavaScriptJitSetting, JavaScriptJitAllowedForSites kunye neJavaScriptJitBlockedForSites, ekuvumela ukuba ulawule imowudi engaphantsi yeJIT, eyenza ukuba usebenziso lweJIT ludityaniswe xa kusenziwa iJavaScript (kuphela itoliki yeIgnition esetyenziswayo) kunye nothintelo lonikezelo. imemori ngexesha lokwenziwa kwekhowudi. Ukukhubaza i-JIT kunokuba luncedo ekuphuculeni ukhuseleko lokusebenza kunye nezicelo zewebhu ezinokuba yingozi kwiindleko zokunciphisa ukusebenza kweJavaScript malunga ne-17%. Kuyaphawuleka ukuba iMicrosoft iye yaya phambili kwaye yaphumeza umfuniselo "Super Duper Secure" imowudi kwi-Edge browser, evumela umsebenzisi ukuba acime iJIT kwaye avule iindlela zokhuseleko zehardware ezingahambelani ne-JIT zeCET (Controlflow-Enforcement Technology), i-ACG (I-Arbitrary Ikhowudi Guard) kunye CFG (Control Flow Guard) iinkqubo ukusetyenzwa umxholo web. Ukuba uvavanyo luba yimpumelelo, ngoko sinokulindela ukuba idluliselwe kwindawo ephambili yeChrome.
• Iphepha elitsha lethebhu libonelela ngoluhlu lwawona maxwebhu adumileyo agcinwe kwiGoogle Drive. Imixholo yolu luhlu ihambelana necandelo eliBalulekileyo kwi drive.google.com. Ukulawula ukuboniswa komxholo we-Google Drive, ungasebenzisa i-"chrome://flags/#ntp-modules" kunye ne-"chrome://flags/#ntp-drive-module-module".
• Amakhadi olwazi amatsha ongeziwe kwiphepha le-Open New Tab ukukunceda ufumane umxholo osanda kujongwa kunye nolwazi olunxulumeneyo. Amakhadi enzelwe ukwenza kube lula ukuqhubeka nokusebenza ngolwazi ukujongwa okuye kwaphazamiseka, umzekelo, amakhadi aya kukunceda ufumane iresiphi yesitya esandula kufunyanwa kwi-intanethi kodwa ilahleka emva kokuvala iphepha, okanye uqhubeke nokwenza. ezivenkileni. Njengovavanyo, abasebenzisi banikwa iimephu ezimbini ezintsha: "Iindlela zokupheka" (chrome://flags/#ntp-recipe-tasks-module) zokukhangela iiresiphi zokupheka kunye nokubonisa iiresiphi ezisanda kujongwa; "Ukuthenga" (chrome://flags/#ntp-chrome-cart-module) yezikhumbuzo malunga neemveliso ezikhethiweyo kwiivenkile ze-intanethi.
• Inguqulo ye-Android yongeza inkxaso yokuzikhethela kwiphaneli yokukhangela eqhubekayo (chrome://flags/#continuous-search), ekuvumela ukuba ugcine iziphumo zophendlo zamva nje zikaGoogle zibonakala (iphaneli iyaqhubeka nokubonisa iziphumo emva kokufudukela kwamanye amaphepha).
• Imowudi yovavanyo yokwabelana ngesicatshulwa yongezwe kuguqulelo lwe-Android (chrome://flags/#webnotes-stylize), ekuvumela ukuba ugcine iqhekeza elikhethiweyo lephepha njengesicatshulwa kwaye wabelane ngalo nabanye abasebenzisi.
• Xa upapasha izongezo ezitsha okanye uhlaziyo lwenguqulelo kwiSitolo seWebhu seChrome, ukuqinisekiswa kwezinto ezimbini zomphuhlisi kuyafuneka ngoku.
• Abasebenzisi beAkhawunti kaGoogle banokukhetha ukugcina ulwazi lwentlawulo kwiakhawunti yabo kaGoogle.
• Kwimodi ye-incognito, ukuba ukhetho lokucoca idatha yokukhangela luvuliwe, i-dialog entsha yokuqinisekisa ukusebenza iphunyeziwe, ichaza ukuba ukucima idatha kuya kuvala ifestile kwaye kuphelise zonke iiseshoni kwimodi ye-incognito.
• Ngenxa yokungahambelani okuchongiweyo kunye ne-firmware yezinye izixhobo, inkxaso yendlela entsha yesivumelwano engundoqo eyongezwe kwi-Chrome 91, ukumelana nokuqikelelwa kwiikhomputha ze-quantum, ngokusekelwe kusetyenziso lwe-CECPQ1.3 (i-Combined Elliptic-Curve kunye ne-Post-Quantum 2) ulwandiso kwi. I-TLSv2, idibanisa iX25519 engundoqo yotshintshiselwano indlela kunye neskim se-HRSS esekwe kwi-NTRU Prime algorithm eyilelwe i-post-quantum cryptosystems.
• IiPorts 989 (ftps-data) kunye ne-990 (ftps) zongezwe kwinani leechweba zenethiwekhi ezinqatshelwe ukwenzela ukuvimba ukuhlaselwa kwe-ALPACA. Ngaphambili, ukuze kukhuselwe ukuhlaselwa kwe-NAT slipstreaming, izibuko 69, 137, 161, 554, 1719, 1720, 1723, 5060, 5061, 6566 kunye ne-10080 sele ivaliwe.
• I-TLS ayisaxhasi i-ciphers ngokusekelwe kwi-algorithm ye-3DES. Ngokukodwa, i-TLS_RSA_WITH_3DES_EDE_CBC_SHA i-cipher suite, echanabeka kuhlaselo lwe-Sweet32, isusiwe.
• Inkxaso ye-Ubuntu 16.04 iyekisiwe.
• Kuyenzeka ukusebenzisa iWebOTP API phakathi kwezixhobo ezahlukeneyo eziqhagamshelwe ngeakhawunti eqhelekileyo kaGoogle. IWebOTP ivumela usetyenziso lwewebhu ukuba lufunde iikhowudi zokuqinisekisa ngexesha elinye ezithunyelwe ngeSMS. Utshintsho olucetywayo lwenza kube lula ukufumana ikhowudi yokuqinisekisa kwisixhobo esiphathwayo esisebenzisa iChrome ye-Android, kwaye siyisebenzise kwinkqubo yedesktop.
• I-API yeeNgcebiso ze-Agent-Agent yandisiwe, yaphuhliswa njengokutshintshwa kwesihloko soMsebenzisi-Arhente. Iingcebiso zoMxumi we-Agent-Agent ikuvumela ukuba uququzelele ukuhanjiswa kwedatha ekhethiweyo malunga nomkhangeli othile kunye neeparameters zenkqubo (uguqulelo, iqonga, njl.) kuphela emva kwesicelo somncedisi. Umsebenzisi, naye, unokugqiba ukuba loluphi ulwazi olunokunikezelwa kubanikazi besayithi. Xa usebenzisa iingcebiso zoMxumi woMsebenzisi, isichongi sebrawuza asihanjiswa ngaphandle kwesicelo esicacileyo, kwaye ngokungagqibekanga kuchaziwe kuphela iiparamitha ezisisiseko, nto leyo eyenza ukuba kube nzima ukuchongwa kokwenziwa.

  Uguqulelo olutsha luxhasa i-parameter ye-Sec-CH-UA-Bitness ukubuyisela idatha malunga ne-platform bitness, enokusetyenziswa ukukhonza iifayile zokubini eziphuculweyo. Ngokungagqibekanga, iparameter ye-Sec-CH-UA-Platform ithunyelwa ngolwazi lweqonga jikelele. Ixabiso le UADataValues ​​libuyisiwe xa ufowunela getHighEntropyValues() iphunyezwa ngokungagqibekanga ukubuyisela iiparameters eziqhelekileyo ukuba akunakwenzeka ukubuyisela ukhetho oluneenkcukacha. Indlela ye-toJSON yongezwe kwinto ye-NavigatorUAData, ekuvumela ukuba usebenzise izakhiwo ezifana ne-JSON.stringify(navigator.userAgentData).

• Ukukwazi ukupakisha izixhobo kwiipakethi kwifomathi ye-Web Bundle, ilungele ukulungelelanisa ukulayishwa ngokufanelekileyo kwenani elikhulu leefayile ezihamba kunye (izitayela zeCSS, iJavaScript, imifanekiso, iframes), izinzile kwaye inikezelwa ngokungagqibekanga. Phakathi kweentsilelo kwinkxaso ekhoyo yeepakethe zeefayile zeJavaScript (i-webpack), apho i-Web Bundle izama ukuyiphelisa: iphakheji ngokwayo, kodwa kungekhona inxalenye yayo, inokuphela kwi-cache ye-HTTP; ukuqokelela kunye nokuphunyezwa kunokuqala kuphela emva kokuba ipakethe ikhutshelwe ngokupheleleyo; Imithombo eyongezelelweyo efana neCSS kunye nemifanekiso kufuneka ifakwe kwifom yeJavaScript strings, eyandisa ubungakanani kwaye ifuna elinye inyathelo lokwahlulahlula.
• I-WebXR Plane Detection API ifakiwe, inika ulwazi malunga neendawo ezicwangcisiweyo kwindawo ye-3D ebonakalayo. I-API ekhankanyiweyo yenza kube lula ukunqanda ukusetyenzwa okunzulu kobutyebi bedatha efunyenwe ngomnxeba MediaDevices.getUserMedia (), kusetyenziswa ukuphunyezwa kobunini bealgorithms yombono wekhompyuter. Masikukhumbuze ukuba iWebXR API ikuvumela ukuba udibanise umsebenzi kunye neeklasi ezahlukeneyo zezixhobo zokwenyani, ukusuka kwizigcina-ntloko ze-3D ezimileyo ukuya kwizisombululo ezisekelwe kwizixhobo eziphathwayo.
• Ii-API ezininzi ezintsha zongezwe kwimowudi yoLingo lweMvelaphi (iimpawu zovavanyo ezifuna ukusebenza ngokwahlukileyo). Uvavanyo lwemvelaphi luthetha ukukwazi ukusebenza kunye ne-API echaziweyo kwizicelo ezikhutshelwe kwi-localhost okanye i-127.0.0.1, okanye emva kokubhalisa kunye nokufumana ithokheni ekhethekileyo esebenzayo ixesha elilinganiselweyo kwindawo ethile.
  • I-API ye-Multi-Screen ye-Window Placement iye yacetywa, evumela ukuba ubeke iifestile kuyo nayiphi na imboniso eqhagamshelwe kwinkqubo yangoku, kunye nokugcina indawo yefestile kwaye, ukuba kuyimfuneko, ukwandisa ifestile kwisikrini esipheleleyo. Ngokomzekelo, usebenzisa i-API ekhankanyiweyo, isicelo sewebhu sokubonisa umboniso sinokuququzelela ukuboniswa kwezilayidi kwisikrini esinye, kwaye sibonise inqaku lombonisi kwelinye.
  • Isihloko se-Cross-Origin-Embedder-Policy, elawula imowudi yokwahlula ye-Cross-Origin kwaye ikuvumela ukuba uchaze imithetho ekhuselekileyo yosetyenziso kwiphepha leMisebenzi eNqabileyo, ngoku ixhasa "i-credentialless" iparameter ukukhubaza ukuhanjiswa kolwazi olunxulumene nesiqinisekiso Iikuki kunye nezatifikethi zabaxumi.
  • Kwizicelo zewebhu ezizimeleyo (PWA, Progressive Web Apps) ezilawula unikezelo lwemixholo yefestile kunye nokusingatha igalelo, i-overlay enolawulo lwefestile, njengebha yesihloko kunye namaqhosha okwandisa / okuwa. Umaleko wandisa indawo ehlelekayo ukugquma yonke ifestile kwaye ikuvumela ukuba wongeze izinto zakho kwindawo yesihloko.
  • Kongezwe ukukwazi ukwenza izicelo ze-PWA ezinokuthi zisetyenziswe njengabaphathi be-URL. Umzekelo, isicelo se-music.example.com singabhalisa ngokwaso njengomphathi we-URL https://*.music.example.com kunye nazo zonke iinguqulelo ezivela kwizicelo zangaphandle zisebenzisa ezi khonkco, umzekelo, ukusuka kubathunywa kunye nabathengi be-imeyile, baya kukhokela. ekuvuleni le PWA- izicelo, hayi umkhangeli zincwadi tab entsha.
• Kuyakwazi ukulayisha iifayile zeCSS usebenzisa ibinzana elithi "import", efana nokulayisha iimodyuli zeJavaScript, ezifanelekileyo xa usenza izinto zakho kwaye ikuvumela ukuba wenze ngaphandle kokunika izitayela usebenzisa ikhowudi yeJavaScript. thatha ngaphandle iphepha ukusuka './styles.css' assert {uhlobo: 'css'}; document.adoptedStyleSheets = [iphepha]; shadowRoot.adoptedStyleSheets = [ishidi];
• Indlela entsha engashukumiyo, i-AbortSignal.abort(), inikezelwe ebuyisela into ye-AbortSignal esele imiselwe ukulahlwa. Endaweni yemigca emininzi yekhowudi yokudala into ye-AbortSignal kwimeko yokulahlwa, ungagqitha ngomgca omnye "buyisela i-AbortSignal.abort()".
• I-Flexbox element yongeze inkxaso yokuqala, ukuphela, ukuziqalela, ukuzigqibela, amagama angundoqo asekhohlo nasekunene, ukuncedisa iziko, i-flex-start kunye ne-flex-end keywords kunye nezixhobo zokulungelelaniswa lula kwendawo yezinto eziguquguqukayo.
• Imposiso () umakhi uphumeza into entsha ekhethwayo "yesizathu", ekuvumela ukuba udibanise ngokulula iimpazamo enye kwenye. const parentError = impazamo entsha('umzali'); const error = impazamo entsha('umzali', {unobangela: impazamo yomzali }); console.log(error.cause === parentError); // → yinyani
• Inkxaso eyongeziweyo yemowudi ye-noplaybackrate kwipropati ye-HTMLMediaElement.controlsList, ekuvumela ukuba ukhubaze izinto ze-interface ebonelelwe kwisiphequluli sokutshintsha isantya sokudlala somxholo wemultimedia.
• Yongeza i-header ye-Sec-CH-Prefers-Color-Scheme, evumela, kwisigaba sokuthumela isicelo, ukuhambisa idatha malunga neskimu sombala esikhethiweyo somsebenzisi esisetyenziswe kwimibuzo yemidiya "ye-prefers-color-scheme", eya kuvumela isayithi ukuba liphucule. ukulayishwa kwe-CSS ehambelana neskimu esikhethiweyo kwaye unqande ukutshintsha okubonakalayo kwezinye izikimu.
• Kongezwe ipropati ye-Object.hasOwn, eyinguqulelo eyenziwe lula ye-Object.prototype.hasOwnProperty, ephunyezwe njengendlela emileyo. Object.hasOwn({prop: 42}, ‘prop’) // → yinyani
• Yenzelwe ukudityaniswa kwe-brute-force okukhawulezayo, umqambi we-JIT we-Sparkplug wongeze imowudi yokuphumeza ibhetshi ukunciphisa umphezulu wokutshintsha amaphepha ememori phakathi kweendlela zokubhala kunye nokuqhuba. I-Sparkplug ngoku iqokelela imisebenzi emininzi ngexesha elinye kwaye ifowunela i-mprotect kube kanye ukutshintsha iimvume zeqela lonke. Indlela ecetywayo inciphisa kakhulu ixesha lokudibanisa (ukuya kwi-44%) ngaphandle kokuchaphazela kakubi ukusebenza kweJavaScript.
• Uguqulelo lwe-Android lukhubaza ukhuseleko lwe-injini ye-V8 eyakhelwe-ngaphakathi ekuhlaselweni kwejelo elisecaleni elifana neSpecter, elingathathwa njengelisebenzayo njengeendawo zokuzahlula kwiinkqubo ezahlukeneyo. Kwi-desktop version, ezi ndlela zivaliwe emva kokukhululwa kwe-Chrome 70. Ukukhubaza ukuhlola okungadingekile kuvunyelwe ukwandisa ukusebenza nge-2-15%.
• Uphuculo lwenziwe kwizixhobo zabaphuhlisi bewebhu. Kwimo yokuhlola iphepha lesimbo, kuyenzeka ukuhlela imibuzo eyenziwe kusetyenziswa i- @container expression. Kwimo yokuhlola inethiwekhi, i-preview yezibonelelo kwifomathi ye-Web bundle iphunyeziwe. Kwikhonsoli yewebhu, iinketho zokukhuphela imitya ngohlobo lweJavaScript okanye i-JSON literals zongezwe kwimenyu yentsingiselo. Ukuphuculwa kokulungiswa kwe-CORS (i-Cross-Origin Resource Sharing) iimpazamo ezinxulumeneyo.

Ukongeza kwizinto ezintsha kunye nokulungiswa kwe-bug, inguqulelo entsha isusa ubuthathaka obungama-27. Uninzi lobuthathaka luchongiwe ngenxa yovavanyo oluzenzekelayo kusetyenziswa idilesi yeSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer kunye nezixhobo zeAFL. Akukho zingxaki zibalulekileyo zichongiwe eziya kuvumela umntu ukuba adlule kuwo onke amanqanaba okhuseleko lomkhangeli zincwadi kwaye enze ikhowudi kwisistim ngaphandle kwendawo yebhokisi yesanti. Njengenxalenye yenkqubo yokuhlawula imbuyekezo eziinkozo zokufumana ubuthathaka ngokukhutshwa kwangoku, uGoogle uhlawule amabhaso ali-19 axabisa i-136500 yeedola (amabhaso amathathu eedola ezingama-20000, ibhaso elinye le-15000 yeedola, amabhaso amathathu e-$10000 enye, amabhaso amathathu e-$7500 kunye namabhaso amathathu e-$5000). Ubungakanani bemivuzo emi-3000 ayikacaciswa.

umthombo: opennet.ru