Ukukhishwa kwe-Chrome 105

I-Google yembule ukukhishwa kwesiphequluli sewebhu se-Chrome 105. Ngesikhathi esifanayo, ukukhululwa okuzinzile kwephrojekthi yamahhala ye-Chromium, esebenza njengesisekelo se-Chrome, kuyatholakala. Isiphequluli se-Chrome siyahluka kusukela ku-Chromium ekusebenziseni amalogo e-Google, ukuba khona kwesistimu yokuthumela izaziso uma kuba nokuphahlazeka, amamojula okudlala okuqukethwe kwevidiyo okuvikelwe ikhophi (i-DRM), isistimu yokufaka ngokuzenzakalela izibuyekezo, evumela unaphakade ukuhlukaniswa kwe-Sandbox , ihlinzeka ngokhiye ku-Google API futhi idlulisela i-RLZ- uma isesha. Kulabo abadinga isikhathi esengeziwe sokubuyekeza, igatsha Le-Extended Stable lisekelwa ngokuhlukile, lilandelwa amaviki angu-8. Ukukhishwa okulandelayo kwe-Chrome 106 kuhlelelwe uSepthemba 27.

Izinguquko ezibalulekile ku-Chrome 105:

• Ukusekelwa kwezinhlelo zokusebenza zewebhu ezikhethekile Izinhlelo zokusebenza ze-Chrome zinqanyuliwe, esikhundleni sazo kwafakwa izinhlelo zokusebenza ezizimele ezisekelwe kubuchwepheshe be-Progressive Web Apps (PWA) kanye nama-Web API ajwayelekile. I-Google iqale yamemezela inhloso yayo yokulahla Izinhlelo zokusebenza ze-Chrome emuva ngo-2016 futhi yahlela ukuyeka ukuzisekela kuze kube ngu-2018, kodwa yahlehlisa lolu hlelo. Ku-Chrome 105, uma uzama ukufaka Izinhlelo zokusebenza ze-Chrome, uzothola isexwayiso sokuthi ngeke zisasekelwa, kodwa izinhlelo zokusebenza zizoqhubeka nokusebenza. Ku-Chrome 109, amandla okusebenzisa Izinhlelo zokusebenza ze-Chrome azokhutshazwa.
• Kunikezwe ukuhlukaniswa okwengeziwe kwenqubo yomnikezeli, enesibopho sokunikezela. Le nqubo manje yenziwa kusiqukathi esengeziwe (Isiqukathi Sohlelo Lokusebenza), esisetshenziswa phezu kwesistimu ekhona yokuhlukanisa yebhokisi lesihlabathi. Uma ukuba sengozini kukhodi yokunikezela kusetshenziswa, imikhawulo eyengeziwe izovimbela umhlaseli ekufinyeleleni kunethiwekhi ngokuvimbela ukufinyelela kumakholi esistimu ahlobene namandla enethiwekhi.
• Isebenzise isitoreji sayo esihlanganisiwe sezitifiketi zezimpande zeziphathimandla zokunikeza izitifiketi (Isitolo Sezimpande ze-Chrome). Isitolo esisha asikakanikwa amandla ngokuzenzakalela futhi kuze kube yilapho ukusetshenziswa sekuphelile, izitifiketi zizoqhubeka nokuqinisekiswa kusetshenziswa isitolo esiqondene nesistimu yokusebenza ngayinye. Isixazululo esivivinywayo sisikhumbuza indlela ye-Mozilla, egcina isitolo sesitifiketi esizimele esizimele se-Firefox, esisetshenziswa njengesixhumanisi sokuqala sokuhlola uchungechunge lokwethenjwa kwesitifiketi lapho kuvulwa amasayithi nge-HTTPS.
• Amalungiselelo aseqalile ukuhoxiswa kwe-Web SQL API, engalinganiselwe, engasetshenziswa kakhulu, futhi edinga ukuklanywa kabusha ukuze ihlangabezane nezimfuneko zokuphepha zesimanje. I-Chrome 105 ivimbela ukufinyelela ku-Web SQL kusukela kukhodi elayishwe ngaphandle kokusebenzisa i-HTTPS, futhi yengeza isexwayiso sokuhoxiswa ku-DevTools. I-Web SQL API ihlelelwe ukuthi isuswe ngo-2023. Konjiniyela abadinga ukusebenza okunjalo, kuzolungiselelwa ukumiselela okusekelwe ku-WebAssembly.
• Ukuvumelanisa kwe-Chrome akusasekeli ukuvumelanisa ne-Chrome 73 kanye nokukhishwa kwangaphambilini.
• Kumapulatifomu e-macOS neWindows, isibukeli sesitifiketi esakhelwe ngaphakathi siyasebenza, esithatha indawo yokubiza isixhumi esibonakalayo esinikezwe uhlelo lokusebenza. Ngaphambilini, isibukeli esakhelwe ngaphakathi sasisetshenziswa kuphela ekwakhiweni kwe-Linux ne-ChromeOS.
• Inguqulo ye-Android yengeza izilungiselelo zokuphatha i-API Yeqembu Lezihloko Nezithakazelo, ethuthukiswa njengengxenye ye-Privacy Sandbox initiative, ekuvumela ukuthi uchaze izigaba zezithakazelo zabasebenzisi futhi uzisebenzise esikhundleni sokulandelela Amakhukhi ukuze uhlonze amaqembu abasebenzisi abanezintshisekelo ezifanayo ngaphandle kokukhomba umuntu ngamunye. abasebenzisi. Ekukhishweni kokugcina, izilungiselelo ezifanayo zengezwe ezinguqulweni ze-Linux, ChromeOS, macOS neWindows.
• Uma unika amandla ukuvikeleka kwesiphequluli okuthuthukisiwe (Ukuphequlula Okuphephile > Ukuvikelwa okuthuthukisiwe), i-telemetry iqoqwa mayelana nezengezo ezifakiwe, ukufinyelela ku-API, nokuxhumeka kumasayithi angaphandle. Le datha isetshenziswa eziphakelini ze-Google ukuthola imisebenzi enonya kanye nokwephulwa kwemithetho ngezengezo zesiphequluli.
• Kwehlisiwe futhi kuzovimba ukusetshenziswa kwezinhlamvu okungezona eze-ASCII ezizindeni ezicaciswe kunhlokweni ye-Cookie ku-Chrome 106 (kuzizinda ze-IDN, izizinda kufanele zibe ngefomethi ye-punycode). Ushintsho luzoletha isiphequluli ekuthobeleni i-RFC 6265bis kanye nokuziphatha okusetshenziswa kuFirefox.
• Kuphakanyiswe i-Custom Highlight API, eklanyelwe ukushintsha ngokungafanele isitayela sezindawo ezikhethiwe zombhalo futhi ikuvumela ukuthi ungakhawulelwa isitayela esimisiwe esinikezwe isiphequluli ezindaweni ezigqanyisiwe (::selection, ::inactive-selection) kanye nokugqamisa. yamaphutha e-syntax (::iphutha-sipelingi, ::iphutha lolimi-). Inguqulo yokuqala ye-API inikeze usekelo lokushintsha umbhalo nemibala yangemuva kusetshenziswa umbala kanye nezakhi-mbumbulu zombala wangemuva, kodwa ezinye izinketho zesitayela zizongezwa ngokuzayo.

  Njengesibonelo semisebenzi engaxazululwa kusetshenziswa i-API entsha, kukhulunywa ngokungeza kuzinhlaka zewebhu ezihlinzeka ngamathuluzi okuhlela umbhalo, izindlela zabo zokukhetha umbhalo, ukugqamisa okuhlukile kokuhlelwa okuhlangene ngasikhathi sinye ngabasebenzisi abaningana, sesha emibhalweni eyenziwe ngokoqobo. , kanye nokuhlaba umkhosi kwamaphutha lapho kuhlolwa isipelingi . Uma ngaphambilini, ukudala ukugqama okungajwayelekile kudinga ukukhohlisa okuyinkimbinkimbi ngesihlahla se-DOM, i-Custom Highlight API inikeza imisebenzi eseyenziwe ngomumo yokwengeza nokukhipha ukugqamisa okungathinti ukwakheka kwe-DOM nokusebenzisa izitayela ngokuhlobene nezinto ze-Range.

• Kwengezwe umbuzo othi “@container” ku-CSS, okuvumela izici ukuthi zenziwe isitayela ngokusekelwe kusayizi wento engumzali. I-"@container" ifana nemibuzo ethi "@media", kodwa ayisetshenziswanga kusayizi wendawo yonke ebonakalayo, kodwa kusayizi we-block (isitsha) lapho i-elementi ibekwe khona, okukuvumela ukuthi uzibekele eyakho. indlela yokukhetha isitayela yezakhi zengane, kungakhathaliseki ukuthi i-elementi ibekwe kuphi ekhasini.
• Kwengezwe i-CSS-pseudo-class “:has()” ukuze kuhlolwe ukuba khona kwe-elementi yengane engxenyeni yomzali. Isibonelo, "p:has(span)" ihlanganisa izakhi , okunento ngaphakathi kwayo .
• Kwengezwe i-HTML Sanitizer API, ekuvumela ukuthi usike izakhi kokuqukethwe okuthinta isibonisi nokusebenza ngesikhathi sokukhipha usebenzisa indlela ye-setHTML(). I-API ingaba wusizo ekuhlanzeni idatha yangaphandle ukuze kukhishwe amathegi e-HTML angasetshenziswa ukwenza ukuhlasela kwe-XSS.
• Kungenzeka ukusebenzisa i-Streams API (ReadableStream) ukuthumela izicelo zokulanda ngaphambi kokuthi indikimba yempendulo ilayishwe, i.e. ungaqala ukuthumela idatha ngaphandle kokulinda ukuthi ukukhiqizwa kwekhasi kuqedele.
• Kuzinhlelo zokusebenza zewebhu ezifakiwe ezizimele zodwa (i-PWA, i-Progressive Web App), kungenzeka ukuthi uguqule ukwakheka kwendawo yesihloko sewindi usebenzisa izingxenye ze-Window Controls Overlay, ezinweba indawo yesikrini yohlelo lwewebhu kulo lonke iwindi futhi yenza kube nokwenzeka ukunikeza uhlelo lwewebhu ukubukeka kohlelo lokusebenza olujwayelekile lwedeskithophu. Uhlelo lokusebenza lwewebhu lungalawula ukunikezwa nokucutshungulwa kokufaka kulo lonke iwindi, ngaphandle kwebhulokhi yembondela enezinkinobho zokulawula iwindi ezijwayelekile (vala, nciphisa, khulisa).
• Ikhono lokufinyelela Izandiso Zomthombo Wezindaba ezivela kubasebenzi abazinikele (kwingqikithi ye-DedicatedWorker) lizinzisiwe, elingasetshenziswa, isibonelo, ukuthuthukisa ukusebenza kokudlala okuvikelwe kwedatha ye-multimedia ngokwakha into ye-MediaSource kusisebenzi esihlukile nokusakaza imiphumela yomsebenzi wayo ku-HTMLMediaElement kuchungechunge olukhulu.
• Ku-API Yamacebiso Eklayenti, eyathuthukiswayo ukuze ithathele indawo unhlokweni Womenzeli Womsebenzisi futhi ikuvumela ukuthi unikeze ngokukhetha idatha mayelana nemingcele ethile yesiphequluli nesistimu (inguqulo, inkundla, njll.) kuphela ngemva kwesicelo seseva, ukusekelwa kweSec. -CH-Viewport-Heigh impahla yengeziwe, ikuvumela ukuthi uthole ulwazi mayelana nobude bendawo ebonakalayo. Ifomethi yokumaka yokusetha amapharamitha Amacebo Eklayenti ezinsizeni zangaphandle kumaka we-“meta” ishintshiwe: Ngaphambilini: Kwaba:
• Kwengezwe amandla okudala izibambi zomcimbi we-onbeforeinput (document.documentElement.onbeforeinput), lapho izinhlelo zokusebenza zewebhu zingabhala ngaphezulu ukuziphatha lapho uhlela umbhalo kumabhulokhi. , nezinye izici ezinesethi yesibaluli "esinokuvumelana", ngaphambi kokuthi isiphequluli siguqule okuqukethwe kwesici nesihlahla se-DOM.
• Amandla e-Navigation API anwetshiwe, okuvumela izinhlelo zokusebenza zewebhu ukuthi zibambe imisebenzi yokuzulazula efasiteleni, ziqalise inguquko futhi zihlaziye umlando wezenzo ngohlelo lokusebenza. Kwengezwe izindlela ezintsha ze-intercept() ukuze uthinte uguquko bese uskrola() ukuze uskrole endaweni enikeziwe.
• Kwengezwe indlela emile ethi Response.json(), ekuvumela ukuthi ukhiqize indikimba yokuphendula ngokusekelwe kudatha yohlobo lwe-JSON.
• Ukuthuthukiswa kwenziwe kumathuluzi onjiniyela bewebhu. Ku-debugger, uma i-breakpoint icushiwe, ukuhlela imisebenzi ephezulu kusitaki kuvunyelwe, ngaphandle kokuphazamisa isikhathi sokususa iphutha. Iphaneli Yerekhoda, ekuvumela ukuthi urekhode, udlale futhi, futhi uhlaziye izenzo zabasebenzisi ekhasini, isekela ama-breakpoint, ukudlalwa kwesinyathelo ngesinyathelo, kanye nokurekhoda imicimbi ye-mouseover.

  Amamethrikhi e-LCP (Largest Contentful Paint) engezwe kudeshibhodi yokusebenza ukuze kubonwe ukubambezeleka lapho kunikezwa izinto ezinkulu (ezibonakalayo umsebenzisi) endaweni ebonakalayo, njengezithombe, amavidiyo, nezinto zokuvimba. Kuphaneli ye-Elements, izendlalelo eziphezulu eziboniswa ngaphezulu kokunye okuqukethwe zimakwe ngesithonjana esikhethekile. I-WebAssembly manje inamandla okulayisha idatha yokususa iphutha ngefomethi ye-DWARF.

Ngokungeziwe ezenzweni ezintsha nokulungiswa kweziphazamisi, inguqulo entsha isusa ubungozi obungu-24. Ubungozi obuningi buhlonzwe njengomphumela wokuhlolwa okuzenzakalelayo kusetshenziswa i-AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer kanye namathuluzi e-AFL. Azikho izinkinga ezibucayi ezitholiwe ezingavumela umuntu ukuthi adlule wonke amazinga okuvikela isiphequluli futhi akhiphe ikhodi kusistimu engaphandle kwendawo ye-sandbox. Njengengxenye yohlelo lokukhokha imiklomelo yemali ngokuthola ubungozi ekukhishweni kwamanje, i-Google ikhokhele imiklomelo engu-21 ebiza u-$60500 (umklomelo owodwa ongu-$10000, umklomelo owodwa ongu-$9000, umklomelo owodwa ongu-$7500, umklomelo owodwa ongu-$7000, imiklomelo emibili engu-$5000, imiklomelo emine engu-$3000 ). $2000 kanye nebhonasi eyodwa engu-$1000). Ubukhulu bemiklomelo eyisikhombisa abukakaziwa.

Source: opennet.ru