Ibhrawuza yewebhu yakhululwa , kwakunye IFirefox 68.8 yeqonga le-Android. Ukongeza, uhlaziyo lwenziwe ngenkxaso yexesha elide . Uyeza ngokukhawuleza eqongeni Isebe leFirefox 77 liza kutshintsha, ukukhutshwa kwayo kucwangciselwe umhla wama-2 kaJuni.
:
- Izakhono zenkqubo ye-Lockwise add-on efakwe kwisikhangeli, enikezela ngojongano "malunga: nokungena" ukulawula amagama ayimfihlo agciniweyo. Isilumkiso ngoku sibonisiwe kwiiakhawunti ezigciniweyo ezinxulumene neesayithi eziye zafumana ii-hacks ngaphambili ezineziqinisekiso ezivuzayo. Isilumkiso siyavezwa ukuba igama lokungena kwiFirefox alikahlaziywa ukusukela oko isayithi iye yafakwa esichengeni.
Kwakhona kongezwa isilumkiso sokuba amagama ayimfihlo asetyenziswa kwiindawo ezininzi athotyelwe. Ukuba enye yeeakhawunti ezigciniweyo ibandakanyeka ekuvuzeni kwesiqinisekiso kwaye umsebenzisi uphinde asebenzise igama eliyimfihlo kwezinye iisayithi, uya kucetyiswa ukuba atshintshe igama eliyimfihlo. Ukuqinisekiswa kwenziwa ngokudityaniswa nesiseko sedatha yeprojekthi , equka ulwazi malunga ne-9.5 yeebhiliyoni zeeakhawunti ezibiweyo ngenxa yokugqekezwa kweendawo ze-443. Indlela ayichazwanga kwaye isekelwe ekuhanjisweni kwe-SHA-1 isimaphambili se-hash ukusuka kwi-imeyile (abalinganiswa abambalwa bokuqala), ekuphenduleni apho umncedisi uvelisa i-hashes yomsila ehambelana nesicelo esivela kwisiseko sedatha yayo, kunye nesikhangeli esisecaleni siyabajonga. kunye ne-hash epheleleyo ekhoyo kwaye, ukuba kukho umdlalo, ikhupha isilumkiso (i-hash epheleleyo ayidluliswanga).
Inani leendawo apho umsebenzi usetyenziselwa khona landisiwe amagama ayimfihlo anamandla xa ugcwalisa iifomu zobhaliso. Ngaphambili, ingcebiso ecebisa igama eligqithisiweyo elomeleleyo iboniswe kuphela ukuba bekukho imihlaba ene-"autocomplete = igama-lokugqitha elitsha" uphawu. Nokuba yeyiphi indawo esetyenziswayo, igama lokugqitha linokuveliswa ngemenu yemeko.
KwiWindows kunye neMacOS, ukuba iFirefox ayinaseti yamagama ayimfihlo, inkxaso yokubonisa incoko yababini yobubhali be-OS kunye nokungenisa iziqinisekiso zenkqubo phambi kokujonga amagama agqithisiweyo agciniweyo. Emva kokungena kwi-password yesistim, ukufikelela kwiiphasiwedi ezigciniweyo kunikezelwa imizuzu emi-5, emva koko igama eligqithisiweyo liya kufuneka lifakwe kwakhona. Lo mlinganiso uya kukhusela iziqinisekiso zakho kwi-prying eyes ukuba ikhomputha ishiywe ingajongwanga ukuba i-master password ayibekwanga kwisikhangeli.
- sebenza"", engasebenziyo ngokungagqibekanga. Xa imowudi yenziwe yasebenza kusetyenziswa “dom.security.https_only_mode” iparamitha malunga:uqwalaselo, zonke izicelo ezenziwe ngaphandle koguqulelo oluntsonkothileyo ziya kuhanjiswa ngokuzenzekelayo ekukhuseleni iinketho zephepha (“http://” ukuya "https://"). Ukutshintshwa kuqhutyelwa kwinqanaba lemithombo elayishwe kumaphepha, kwaye xa ifakwe kwibar yedilesi. Ukuba umzamo wokufikelela kwidilesi efakwe kwibar yedilesi nge-https iphela ngexesha lokuphuma, umsebenzisi uya kuboniswa iphepha lempazamo elineqhosha lokwenza isicelo nge-http://. Kwimeko yokusilela xa kulayishwa nge-"https://" imithombo engaphantsi elayishwe ngexesha lokusetyenzwa kwephepha, ezo ntsilelo aziyi kuhoywa, kodwa izilumkiso ziya kuboniswa kwikhonsoli yewebhu, enokujongwa ngezixhobo zomphuhlisi wewebhu.
- Yongeza amandla okutshintsha ngokukhawuleza phakathi kokubukela iividiyo kwi "» (Umfanekiso-kuMfanekiso) kunye nokujongwa kwesikrini esigcweleyo. Umsebenzisi unokunciphisa ividiyo kwifestile encinci kwaye ngaxeshanye enze omnye umsebenzi, ukuquka kwezinye iiaplikeshini nakwiidesktop ezinenyani. Ukuba ufuna ukujika yonke ingqalelo yakho kwividiyo, cofa nje kabini ukuya kumboniso wesikrini esigcweleyo. Ukucofa kabini kwakhona kuya kubuyisela imboniselo kwimowudi yomfanekiso.
- Umsebenzi wenziwe ukuphucula ukubonakala kunye nokulula ukusebenza kunye nebar yeedilesi. Xa uvula ithebhu entsha, isithunzi esijikeleze indawo yebar yedilesi sincitshisiwe. Ibha yeebhukhimakhi yandisiwe kancinci ukunyusa indawo ecofayo kwizikrini zokuchukumisa.
- Kwimekobume esekwe Wayland usebenzisa
ukubakho kokukhawuleziswa kwehardware yokwenziwa kwekhowudi yeVP9 kunye nezinye iifomati zevidiyo ezixhaswayo kwiFirefox. Ukukhawuleza kunikezelwa ngokusebenzisa i-VA-API (i-Video Acceleration API) kunye ne-FFmpegDataDecoder (inkxaso ye-H.264 kuphela iphunyezwe ekukhululweni kwangaphambili). Ukulawula ukuba unikezelo luvuliwe na, kufuneka usete iparameters “widget.wayland-dmabuf-webgl.enabled” kunye ne “widget.wayland-dmabuf-vaapi.enabled” malunga no:config. - Kwi-Windows, kubasebenzisi beelaptops ezine-Intel GPU kunye nesisombululo sesikrini esingekho ngaphezulu kwe-1920x1200, inkqubo yokuhlanganisa isebenze ngokungagqibekanga. , ebhalwe ngolwimi lwe-Rust kunye nephepha elikhupha umxholo onikezela imisebenzi kwicala le-GPU.
- Inkxaso yento eyongeziweyo , yintoni
ivumela ukusetyenziswa kojongano и , ibaleka ngaphandle komtya ophambili wophumezo kwiFirefox. I-API entsha ikuvumela ukuba usebenze i-audio ngexesha langempela, ulawule ngokucwangcisekileyo iiparamitha zomsindo ngaphandle kokwazisa ukulibaziseka okongeziweyo okanye ukuchaphazela ukuzinza kwemveliso yomsindo. Ukwaziswa kwe-AudioWorklet kwenze ukuba kuqhagamshelwe kwiifowuni ze-Zoom kwiFirefox ngaphandle kokufaka izongezo ezahlukeneyo, kwaye yenze ukuba kube nokwenzeka ukuphumeza iimeko ezintsonkothileyo zokusetyenzwa kweaudiyo kwisikhangeli, esinje ngesandi sendawo kwiinkqubo zokwenyani okanye imidlalo. - Kwi-CSS , echaza amaxabiso ombala wenkqubo (CSS Color Module Level 4).
- I-Intl.NumberFormat, Intl.DateTimeFormat, kunye nabakhi be-Intl.RelativeTimeFormat bavumela ukuqhubekekiswa kweenketho ze "numberingSystem" kunye "nekhalenda" ngokungagqibekanga. Umzekelo: "Intl.NumberFormat('en-US', {numberSystem: 'latn'})" okanye "Intl.DateTimeFormat('th', { calendar: 'gregory' })".
- Ukuthintelwa kwemithetho elandelwayo engaziwayo yenziwe ngeendlela ezifana ne "location.href" okanye .
- Xa uvavanya unikezelo lweendawo kwizixhobo eziphathwayo kusetyenziswa iMowudi yoYilo oluphendulayo kwizixhobo zomphuhlisi wewebhu, ukulinganisa ukuziphatha kwesixhobo esiphathwayo xa uphethe i-zoom yokucofa kabini kunikezelwa. Kusetyenziswe unikezelo oluchanekileyo lweethegi ze-meta-viewport, eyenze ukuba kukwazeke ukunyusa iisayithi zakho zeFirefox ye-Android ngaphandle kwesixhobo esiphathwayo.
- Kwi-interface yokuhlola izicelo zenethiwekhi, xa ucofa kabini kwisahluli sekholomu kwi-header, ubungakanani bekholamu yetafile buhlengahlengiswa ngokuzenzekelayo kwidatha ebonisiweyo.
- Isihluzi esitsha soLawulo longezwe kwi-WebSocket yokuhlola ujongano lokubonisa izakhelo zolawulo. Kuphunyezwe ukukwazi ukujonga imiyalezo kwifomathi , eyongezwe kuluhlu lweeprothokholi ezifomathiweyo ngokuzenzekelayo, ezifana ne-socket.io, SignalR kunye ne-WAMP.
- I-JavaScript debugger ngoku iyakwazi ukungazihoyi iifayile ezingabandakanyekanga kulungiso lweempazamo. Imenyu ye "blackbox" inika iinketho zokufihla umxholo obekwe ngaphakathi okanye ngaphandle kolawulo olukhethiweyo kwibar esecaleni. Xa ukhuphela umkhondo westake, qinisekisa ukuba umendo opheleleyo ubekwe kwibhodi eqhotyoshwayo, hayi nje igama lefayile.
- Kwikhonsoli yewebhu, kwimodi ye-multi-line, kunokwenzeka ukufihla iinqununu zekhowudi ezidlula imigca emihlanu (ukwandisa, nqakraza naphi na kwindawo kunye nekhowudi ebonisiweyo).
Ukongeza kwizinto ezintsha kunye nokulungiswa kwebug, iFirefox 76 ilungisiwe , apho i-10 (i-CVE-2020-12387, i-CVE-2020-12388 kunye ne-8 phantsi kwe-CVE-2020-12395) iphawulwe njengento ebalulekileyo kwaye inokukwazi ukukhokelela ekuqhutyweni kwekhowudi yomhlaseli xa ivula amaphepha ayilwe ngokukodwa. Ukuba sesichengeni kwe-CVE-2020-12388 kukuvumela ukuba uphume kwindawo yebhokisi yesanti kwiWindows ngokusebenzisa iithokheni zofikelelo. Umngcipheko we-CVE-2020-12387 unxulunyaniswa nokufikelela kwibhloko yememori esele ikhululiwe (Sebenzisa-emva kokukhululeka) xa uMsebenzi weWebhu ephelisa. I-CVE-2020-12395 idibanisa imiba yememori enjenge-buffer ephuphumayo.
umthombo: opennet.ru