IFirefox iceba ukuyisusa ngokupheleleyo inkxaso yeFTP

Abaphuhlisi beFirefox thaca isicwangciso sokuyeka ngokupheleleyo ukuxhasa iprotocol yeFTP, eya kuchaphazela zombini ukukwazi ukukhuphela iifayile ngeFTP kwaye ujonge imixholo yolawulo kwiiseva zeFTP. NgoJuni 77 ukukhutshwa kweFirefox 2, inkxaso yeFTP iya kukhutshazwa ngokungagqibekanga, kodwa malunga: yongezwe i "network.ftp.enabled" isicwangciso ikuvumela ukuba ubuyisele iFTP. IFirefox 78 ESR yakha inkxaso yeFTP ngokungagqibekanga iya kuhlala wenziwe wavuka. Ngo-2021 icwangcisiwe susa ngokupheleleyo ikhowudi enxulumene neFTP.

Isizathu sokuyeka ukuxhasa i-FTP kukungakhuselekanga kwale protocol ukusuka ekuguqulweni nasekuthinteleni i-traffic traffic ngexesha lokuhlaselwa kwe-MITM. Ngokutsho kwabaphuhlisi beFirefox, kwiimeko zangoku akukho sizathu sokusebenzisa i-FTP endaweni ye-HTTPS ukukhuphela izixhobo. Ukongeza, ikhowudi yenkxaso ye-FTP yeFirefox indala kakhulu, ibeka imingeni yogcino, kwaye inembali yokutyhila inani elikhulu lobuthathaka kwixesha elidlulileyo. Kwabo bafuna inkxaso ye-FTP, kucetyiswa ukuba basebenzise izicelo zangaphandle ezincanyathiselwe njengabaphangi be-ftp:// URL, ngokufanayo nendlela irc:// okanye i-tg:// okanye iziphatho ezisetyenziswa ngayo.

Masikhumbule ukuba ngaphambili kwiFirefox 61, ukukhuphela izixhobo ngeFTP ukusuka kumaphepha avulwe ngeHTTP/HTTPS kwakungavumelekanga, kwaye kwiFirefox 70, ukunikezelwa kwemixholo yeefayile ezikhutshelweyo nge-ftp kwamiswa (umzekelo, xa kuvulwa nge-ftp, imifanekiso. ,                      nayo i-                                             yiFUNDE   kunye neefayile ze-html zefayile. KwiChrome kwakhona yamkelwe cwangcisa ukulahla i-FTP - ngaphakathi Chrome 80 Inkqubo yokukhubaza ngokuthe ngcembe inkxaso ye-FTP ngokungagqibekanga (kwipesenti ethile yabasebenzisi) sele iqalile, kwaye i-Chrome 82 icwangciselwe ukususa ngokupheleleyo ikhowudi eyenza umxhasi we-FTP asebenze. Ngokutsho kweGoogle, i-FTP iphantse ingasasetyenziswa - isabelo sabasebenzisi be-FTP simalunga ne-0.1%.

umthombo: opennet.ru

Yongeza izimvo