Ukukhutshwa kweFirefox 73

Ibhrawuza yewebhu yakhululwa Firefox 73, kwakunye inguqulelo yeselula IFirefox 68.5 yeqonga le-Android. Ukongeza, uhlaziyo lwenziwe amasebe ngenkxaso yexesha elide 68.5.0. Uyeza ngokukhawuleza eqongeni uvavanyo lwe-beta isebe leFirefox 74 liza kuhamba, ukukhutshwa kwayo kucwangciselwe umhla we-10 kaMatshi (iprojekthi isusiwe iiveki ezi-4 umjikelo wophuhliso).

Siseko ezintsha:

• Kwindlela yokufikelela kwi-DNS phezu kwe-HTTPS (DoH, DNS phezu kwe-HTTPS), inkxaso yenkonzo yongeziwe. OkulandelayoDNS, ukongeza kwiseva ye-CloudFlare DNS enikwe ngaphambili ("https://1.1.1.1/dns-query"). Vula i-DoH kwaye ukhethe umboneleli unako kwisethingi yoqhagamshelo lwenethiwekhi.
  

• Inqanaba lokuqala liphunyeziwe ukupheliswa inkxaso yezongezo ezifakwe yi-workaround. Utshintsho luchaphazela kuphela ufakelo lwezongezo kulawulo ekwabelwana ngalo (/usr/lib/mozilla/izandiso/, /usr/share/mozilla/extensions/ okanye ~/.mozilla/extensions/) eqhutyekwa zizo zonke iimeko zeFirefox kwinkqubo ( ayidityaniswanga nomsebenzisi) . Le ndlela iqhele ukusetyenziselwa ukufakela ukongezwa kwangaphambili kunikezelo, ukutshintshwa okungacelwanga kunye nezicelo zomntu wesithathu, ukudibanisa izongezo ezinobungozi, okanye ukuhambisa ngokwahlukeneyo isongezo kunye nesifakeli saso. KwiFirefox 73, ezongezo ezinjalo ziya kuqhubeka nokusebenza, kodwa ziya kuhanjiswa ukusuka kulawulo jikelele ziye kwiiprofayile zomsebenzisi ngamnye, okt. iya kuguqulwa ibe kwifomati esetyenziswayo xa uhlohla ngomphathi wokongeza.
• Kongezwe ukukwazi ukuseta inqanaba lesiseko somgangatho wehlabathi osebenza kuwo onke amaphepha kunokuba abotshelelwe kwiziza ezizimeleyo. Ungasitshintsha isikali esipheleleyo kwizicwangciso (malunga: nezinto ozikhethayo) kwicandelo elithi "Ulwimi kunye neNkangeleko". Kukho ukhetho kwiseto olukuvumela ukuba ufake isicelo sokukala kuphela kwisicatshulwa, ngaphandle kokuchukumisa imifanekiso.
  

• Incoko yababini ecela ukuba ugcine amagama angeniswayo ngoku iboniswa kuphela ukuba ixabiso lokungena kwindawo yongeniso litshintshiwe.
• Kwiinkqubo ezinabaqhubi be-NVIDIA entsha kunokukhululwa kwe-432 kunye nezigqibo zesikrini ezingaphantsi kwe-1920x1200, inkqubo yokuhlanganisa yenziwe IWebRender. Ngaphambili, iWebRender yayinikwe amandla kuphela kwi-NVIDIA GPUs ngomqhubi weNouveau, kunye ne-AMD kunye ne-Intel GPUs. Inkqubo yokuqulunqa iWebRender ibhalwe kwiRust kwaye ikhuphela ngaphandle umxholo wephepha onikezela ngemisebenzi kwiGPU.
• Yongeziwe ithuba usebenzisa iSikhangeli esiKhethekileyo seSiza (SSB) ngqikelelo uku
  sebenza ngesicelo sewebhu njengenkqubo yedesktop eqhelekileyo. Kwimowudi
  I-SSB ifihla imenyu, ibha yedilesi kunye nezinye izinto ze-interface yesikhangeli, kwaye kwifestile yangoku unokuvula kuphela amakhonkco kumaphepha esayithi yangoku (izixhumanisi zangaphandle zivule kwifestile yesiphequluli esahlukileyo). Ngokungafaniyo nemo ye-kiosk ekhoyo, umsebenzi awuqhutywa kwimodi yesikrini esigcweleyo, kodwa kwifestile eqhelekileyo, kodwa ngaphandle kwe-Firefox-specific interface elements. Ukuvula ikhonkco kwimodi ye-SSB, iflegi yomyalelo "-ssb" icetywayo, enokusetyenziswa xa udala iindlela ezimfutshane kwizicelo zewebhu. Imowudi inokubizwa kwakhona usebenzisa iqhosha elithi "Qalisa iSikhangeli esiKhethekileyo seNdawo" ebekwe kwimenyu yezenzo zephepha (iiellipses ekunene kwebar yedilesi). Ngokungagqibekanga, indlela ayisebenzi kwaye mayivulwe ngokuchaza “browser.ssb.enabled = true” ku about:config.
  

• Imowudi yokubonisa umchasi omkhulu, eyenzelwe abantu abanombono ophantsi okanye imbonakalo yombala ophazamisekileyo, ngoku ixhasa imifanekiso yangasemva. Ukugcina ukufundeka kunye nokubonelela ngenqanaba elifanelekileyo lokuchasana, isicatshulwa esibonakalayo sahlulwe ngemvelaphi eyahlukileyo esebenzisa umbala womxholo osebenzayo.
• Ukuphuculwa komgangatho wesandi xa usonyuka okanye usihla isantya sokudlala;
• Ukuzifumanisa kuphuculwe ngokuzenzekela kokukhowudwa kwamagama amadala kumaphepha anganikezeli ngokucacileyo iinkcukacha zokhowudo.
• Kwibar yokukhangela kwikhonsoli yewebhu, ngoku kunokwenzeka ukucoca ngesitshixo esilahlekileyo ngokucacisa isimboli "-" phambi kwemaski okanye intetho eqhelekileyo. Umzekelo, umbuzo wophendlo "-img" uzakubuyisela zonke iziqalelo ezingekhoyo kumtya "img", ngelixa "-/(cool|rad)/" izakubuyisela izinto ezingahambelani nentetho eqhelekileyo "/(cool|rad) )/".
• Kongezwe iimpawu ezintsha zeCSS overscroll-behaviour-inline и overscroll-behavior-block ukulawula ukuziphatha kokuskrola xa umda wengqiqo wendawo yokuskrola ufinyelelwe.
• I-SVG ngoku ixhasa iipropathi isithuba soonobumba и isithuba samagama.
• Indlela eyongeziweyo kwi-HTMLFormElement isiceloThumela(), eqalisa ukungeniswa kwenkqubo yedatha yefom ngendlela efanayo nokucofa iqhosha lokungenisa. Umsebenzi ungasetyenziswa xa uphuhlisa eyakho ifom yokungenisa amaqhosha efowuna ifom.submit() ayonelanga kuba ayiqinisekisi iiparameters ngokusebenzisana, ivelise isiganeko 'sokungenisa', kwaye idlulise idatha ebotshelelwe kwiqhosha lokungenisa.
• Iipropati Ububanzi bangaphakathi и innerHeight Izinto zefestile ngoku zihlala zibuyisela obona bubanzi bukhankanyiweyo kunye nobude bendawo (UYilo lwezibuko), kwaye hayi ubukhulu bendawo ebonakalayo (iVisual Viewport).
• Iqhutywe ukwandisa ukusebenza kwezixhobo zabaphuhlisi bewebhu. Umthwalo wokuqokelela iinkcukacha-manani ukwenzela ipaneli yokubeka iliso kumsebenzi wothungelwano ucuthiwe. Kwi-JavaScript debugger kunye ne-web console, ukulayishwa kwezikripti ezinkulu ngokubhekiselele kwimibhalo yazo yentsusa (source-mapped) iye yakhawuleziswa.
• Kwikhonsoli yewebhu kukho iingxaki ngokuya ngaphaya komda wedomeyini yangoku (IIKORI, Cross-Origin Resource Sharing) ngoku ziboniswa njengempazamo kunezilumkiso. Uguquguquko oluchazwe kwiintetho ngoku lukhona ukuze lugqitywe ngokuzenzekelayo kwikhonsoli.
• Kwizixhobo zomphuhlisi wewebhu kwicandelo lokuhlola inethiwekhi, i-decoding yemiyalezo (JSON, MsgPack kunye ne-CBOR) kwi-WAMP (WebSocket Web Application Protocol) ifomathi ethunyelwa phezu koqhagamshelo lweWebSocket inikwe.
  

Ukongeza kwizinto ezintsha kunye nokulungiswa kwebug, iFirefox 73 ilungisiwe 15 ubuthathaka, apho i-11 (eqokelelwe phantsi kwe-CVE-2020-6800 kunye ne-CVE-2020-6801) ibonakaliswe njengento ekwazi ukukhokelela ekuqhutyweni kwekhowudi yomhlaseli xa ivula amaphepha ayilwe ngokukodwa. Masikukhumbuze ukuba iingxaki zememori, ezifana ne-buffer overflows kunye nokufikelela kwiindawo zememori esele zikhululiwe, kutshanje ziphawulwe njengengozi, kodwa zingabalulekanga.

umthombo: opennet.ru