Isengezo sesiphequluli se-NoScript 11.2.18 sikhishiwe, esiklanyelwe ukuvimba ikhodi ye-JavaScript eyingozi nengadingeki, kanye nezinhlobo ezihlukahlukene zokuhlasela (i-XSS, i-DNS Rebinding, i-CSRF, i-Clickjacking). Inguqulo entsha ilungisa inkinga edalwe ushintsho ekuphathweni kwefayela:// URLs enjinini ye-Chromium. Inkinga iholele ekungakwazini ukuvula amasayithi amaningi (i-Gmail, i-Facebook, njll.) ngemva kokubuyekeza isengezo kunguqulo 11.2.16 ekukhishweni okusha kweziphequluli ezisebenzisa injini yeChromium (Chrome, Brave, Vivaldi).
Inkinga idalwe ukuthi ezinguqulweni ezintsha ze-Chromium, ukufinyelela kwezengezo ku-URL “yefayela:///” bekunqatshelwe ngokuzenzakalela. Inkinga ayizange inakwe ngoba ivele kuphela lapho kufakwa i-NoScript evela kukhathalogi yezengezo zeSitolo se-Chrome. Lapho ufaka ingobo yomlando ye-zip kusuka ku-GitHub ngemenyu ethi “Layisha okungapakishiwe” (chrome://extensions > Imodi yonjiniyela), inkinga ayiveli, njengoba ukufinyelela kufayela:/// i-URL akuvinjiwe kumodi yonjiniyela. Isixazululo senkinga ukunika amandla isilungiselelo esithi “Vumela ukufinyelela kuma-URL efayela” kuzilungiselelo zezengezo.
Isimo sabhebhethekiswa yiqiniso lokuthi ngemva kokufaka i-NoScript 11.2.16 ohlwini lwemibhalo lwe-Chrome Web Store, umbhali uzame ukukhansela ukukhululwa, okuholele ekunyamaleni kwalo lonke ikhasi lephrojekthi. Ngakho, isikhathi esithile abasebenzisi abakwazanga ukubuyela emuva enguqulweni yangaphambilini futhi baphoqeleka ukuthi bakhubaze isengezo. Ikhasi leSitolo Sewebhu Se-Chrome manje selibuyiselwe futhi inkinga isilungisiwe ekukhishweni kwe-11.2.18. Kukhathalogi yeSitolo Sewebhu Se-Chrome, ukuze kugwenywe ukubambezeleka ekubuyekezeni ikhodi yenguqulo entsha, kunqunywe ukuthi kubuyiselwe esimweni sangaphambilini bese kwafakwa ukukhishwa okungu-11.2.17, okufanayo nenguqulo esivele ihloliwe 11.2.11.
Source: opennet.ru