Ukukhishwa kwe-Chrome 75

Google kwethulwe ukukhishwa kwesiphequluli sewebhu I-Chrome 75... Kanyekanye iyatholakala ukukhishwa okuzinzile kwephrojekthi yamahhala Chromium, esebenza njengesisekelo se-Chrome. Isiphequluli se-Chrome okuhlukile ukusetshenziswa kwezimpawu ze-Google, ikhono lokulanda imojula ye-Flash uma ucelwa, ukuba khona kwesistimu yokuthumela izaziso uma kwenzeka ingozi, amamojula okudlala okuqukethwe kwevidiyo evikelekile (DRM), uhlelo lokufaka ngokuzenzakalelayo izibuyekezo nokudlulisa ngesikhathi sokusesha Izilinganiso ze-RLZ. Ukukhishwa okulandelayo kwe-Chrome 76 kuhlelelwe uJulayi 30.

main shintsha в Chrome 75:

  • Endleleni ye-canvas.getContext(). kungezwe ifulegi “elingavumelanisiwe” ukuze kucutshungulwe okuqukethwe kweCanvas (2D noma i-WebGL) kusetshenziswa enye isistimu yokunikezela enikeza ukubambezeleka okuncane ngokweqa indlela yokubuyekeza ye-DOM evamile futhi ikhiphe ngokuqondile nge-OpenGL;
  • I-API inwetshiwe Ukwabelana Kwewebhu (i-navigator.share yento), lapho, esikhundleni sohlu lwezinkinobho ngazinye, ungakha inkinobho ehlanganisiwe ukuze ishicilelwe ezinkundleni zokuxhumana ezihambisana nesivakashi. Ekukhishweni okusha ku-API kwengezwe ikhono lokubonisa ibhokisi elijwayelekile lokuthumela amafayela kwezinye izinhlelo zokusebenza (isibonelo, ku-Android ibhulokhi iboniswa ukuze ithunyelwe ngemeyili, i-Bluetooth, njll.);
  • Kwenziwa ikhono lokuhlukanisa amaqembu ezinombolo ngama-digital literals nge-underscore. Isibonelo, ukuze uthuthukise ukufundeka kwezinombolo ezinkulu, ungacacisa 1_000_000_000 kukhodi futhi le nombolo izocutshungulwa njengo-1000000000;
  • Inikwe amandla ngokuzenzakalela kubo bonke abasebenzisi bedeskithophu imodi yokuhlukaniswa kwesayithi eqinile, lapho amakhasi avela kubasingathi abahlukahlukene ahlala ekhona enkumbulweni yezinqubo ezihlukene, ngayinye esebenzisa i-sandbox yayo. Isici esiyinhloko semodi yokuhlukanisa eqinile ukuhlukaniswa hhayi ngamathebhu, kodwa ngezizinda, i.e. uma ngaphambilini okuqukethwe kweskripthi, ama-iframe nama-popups alandwe kwezinye izizinda asetshenziswa ngenqubo efanayo nesizinda sesizinda, manje azohlukaniswa ngezinqubo ezahlukene;
  • Izengezo ezisohlwini oluvinjelwe manje zizokhishwa ngokuphelele kunokuba zikhutshazwe futhi zifakwe kumodi engasebenzi.
  • Kusiphathi somsebenzi se-Chrome esakhelwe ngaphakathi (Izilungiselelo > Amathuluzi Engeziwe > Isiphathi Somsebenzi) ivikelekile ukukhombisa abasebenzi beNkonzo;
  • Isibaluli " sengezwe endleleni ye-window.open().i-noreferrer“, okukuvumela ukuthi uvule ikhasi ngaphandle kokugcwalisa unhlokweni Wokubhekisa;
  • Kwengeziwe iziqondiso CSP (Inqubomgomo Yokuphepha Kokuqukethwe) "script-src-attr", "script-src-elem", "style-src-attr" kanye ne-"style-src-elem", ehlinzeka ngokusebenza kweskripthi neziqondiso zesitayela, kodwa ikhono lokufaka isicelo kubaphathi bomcimbi ngamunye, izakhi noma izibaluli;
  • Ku-Web Authentication API kwengezwe Usekelo lwe-PIN ye-FIDO CTAP2 yokusebenzisa i-PIN khodi echazwe umsebenzisi ukuze igunyaze ukusebenza ngokhiye abasekela umthetho olandelwayo. I-FIDO CCAP2. Ku-configurator, esigabeni esithi "Okuthuthukisiwe", kuvele into ethi "Phatha okhiye bokuphepha", lapho unganikeza khona i-PIN khodi ukuze uvikele okhiye abatholakala kudrayivu ye-USB, kanye nenketho yokusetha kabusha ukhiye (sula konke. idatha kanye ne-PIN);
  • Izinto zengezwe ku-Web Animations API
    I-AnimationEffect kanye ne-KeyframeEffect, okukuvumela ukuthi ulawule ngokuhlanganyela izinto ezigqwayizayo nesikhathi (ubude besikhathi, ukubambezeleka).
    Ngaphezu kwalokho, kwengezwe umakhi omusha Upopayi(), okunikeza ulawulo olubanzi lokugqwayiza. Ngaphambilini, i-Web Animations API ikuvumele ukuthi udale ukugqwayiza usebenzisa indlela ye-Element.animate(), ebuyisele into ye-Animation esele yenziwe. Manje umthuthukisi angakwazi ukulawula ukudalwa kwayo ngocingo lomakhi olucacile, lapho, isibonelo, ungacacisa into ye-KeyframeEffect;

  • Inketho eyengeziwe HTMLVideoElement.playsInline, iyala isiphequluli ukuthi sibonise ividiyo endaweni yokudlala yesici (isibonelo, ukunikeza indlela yokudlala enesikrini esigcwele);
  • Indlela ye-MediaStreamTrack.getCapabilities() isebenzisa ikhono lokuthola ububanzi bamanani avumelekile ezakhiwo ezihlobene namadivayisi omsindo (imvamisa yesampula, ukubambezeleka, inani lamashaneli, njll.);
  • I-API yengezwe ku-WebRTC I-RTCDtlsTransport ukuthola ulwazi mayelana nezinto zokuthutha ezisebenzayo, ezifana nokusetshenziswa kwe-SCTP noma i-DTLS (I-Datagram Transport Layer Security), lapho amaphakethe e-RTP nawe-RTCP athunyelwa noma amukelwa ngayo. I-interface ye-RTCIceTransport nayo yengeziwe ukuze inikeze ulwazi mayelana nesimo sezokuthutha
    Ama-ICE asetshenziswe entweni ye-RTCPeerConnection;

  • Isihloko se-Cache-Control sisebenzisa isiyalezo "dala-ngenkathi-qinisekisa“, ekuvumela ukuthi usethe iwindi lesikhathi esengeziwe lapho isiphequluli singasebenzisa insiza enokuhlola kabusha okuphelelwe yisikhathi kwe-asynchronous mayelana nokufaneleka;
  • Isici esingeziwe Skrola i-Snap Stop ukuze unqume ukufinyela kuma-elementi ngesikhathi sokuskrola okungaphakathi (isibonelo, ukuthinta okuswayipha okubanzi lapho ukhetha izithombe ohlwini kuzoholela ekukhetheni hhayi into yokugcina, kodwa elandelayo);
  • Inguqulo ye-Android ithuthukise isixhumi esibonakalayo sokugcwalisa ngokuzenzakalelayo amapharamitha e-akhawunti kumafomu okuqinisekisa. Ibhulokhi yokusikisela manje isikhonjiswa ngokuqondile ngaphezu kwekhibhodi esesikrinini futhi, lapho ichofozwa, iveza izinketho ezingase zigcinwe esikhundleni sekhibhodi esesikrinini, ngaphandle kokufihla ifomu lokufaka;
  • Kwengezwe ukusekelwa kokuhlola kweModi Yokufunda, uma kunikwe amandla, kuboniswa umbhalo oshoyo kuphela, futhi zonke izilawuli ezihambisanayo, izibhengezo, amamenyu, amabha okuzulazula nezinye izingxenye zekhasi ezingahlobene nokuqukethwe ziyafihlwa. Ukunika amandla usekelo lwemodi entsha kwenziwa kusetshenziswa inketho ye-chrome://flags/#enable-reader-mode, ngemva kwalokho inketho yokuyisebenzisa ivela kumenyu yokudonsela phansi;
  • Injini ye-V8 JavaScript isebenzisa imodi yokulondoloza esobala yemiphumela yokuhlanganisa ye-WebAssembly (uma ikhasi livulwa kabusha, izingxenye ze-WebAssembly ezicutshungulwe ngaphambilini zizokwethulwa kunqolobane). IN
    I-WebAssembly iphinde yengeza i-memory.copy entsha, i-memory.fill, i-table.copy, i-memory.init, ne-table.init imiyalelo yokukopisha, ukugcwalisa, nokuqalisa izindawo ezinkulu zenkumbulo;

  • Usekelo olungeziwe lokudlulisa izikripthi ngokuqondile ngokuhamba kwesikhathi njengoba zilandwa ngenethiwekhi ngaphandle kokubandakanya uchungechunge oluyinhloko lwe-Chrome. Ngaphambilini, ukusakaza kwatholwa okokuqala kuchungechunge oluyinhloko, okuvela kulo kwaqondiswa kabusha kumhlaziyi. Lolu hlelo lusho ukuthi ukuqondisa kabusha kungase kuvinjwe eminye imisebenzi esebenza kuchungechunge oluyinhloko, njengokuhlaziya i-HTML nokusebenzisa ezinye izikripthi ze-JavaScript. Manje ukuqondisa kabusha okunjalo kuqediwe;
  • Ukuthuthukiswa kwamathuluzi onjiniyela bewebhu:
    • Imodi yokuhlola ye-CSS inikeza ukuqedelwa ngokuzenzakalela kwamagama namavelu ayisisekelo emisebenzi angasetshenziswa kuzakhiwo ze-CSS (isibonelo, “isihlungi: blur(1px)”). Amanani aphakanyisiwe aboniswa ngokushesha esakhiweni sekhasi elibukwe kuqala;
      Ukukhishwa kwe-Chrome 75

    • Kuphaneli yomyalo, eboniswa lapho ucindezela u-Ctrl+Shift+P, umyalo othi “Sula Idatha Yesizinda” uyasetshenziswa ukuze kusule yonke idatha ehlotshaniswa nekhasi (okufana nokubiza Uhlelo Lokusebenza > Sula imenyu Yesitoreji), okuhlanganisa abasebenzi besevisi, Isitoreji sasendaweni, iseshiniIsitoreji. , IndexedDB, Web SQL , Amakhukhi, Inqolobane kanye nenqolobane yohlelo lokusebenza;
    • Kwengezwe ikhono lokubuka yonke imininingwane ekhona ye-IndexedDB (ngaphambili kokuthi Isicelo> I-IndexedDB kwakungenzeka ukubuka isizindalwazi sesizinda samanje, esingazange sivumele, isibonelo, ukuhlola ukusetshenziswa kwe-IndexedDB kumabhulokhi alayishwe nge-iframe);

      Ukukhishwa kwe-Chrome 75

    • Kusixhumi esibonakalayo sokuhlola inethiwekhi, ithulithiphu elivelayo lapho uhambisa phezulu ezinkambini kukholomu ethi “Usayizi” manje libonisa usayizi wensiza ngendlela yayo yoqobo, ngaphandle kokucindezelwa;

      Ukukhishwa kwe-Chrome 75

    • Ibha eseceleni yedebugger inikeza okukhiphayo okuhlukene kolwazi mayelana nesimo sezindawo zokunqamuka eziboshelwe ezingxenyeni ngazinye zezengezo eziyinkimbinkimbi emugqeni (iphoyinti lokunqamuka elisemgqeni), isibonelo, lawo asethwe kuchungechunge lwekholi yendlela;

      Ukukhishwa kwe-Chrome 75

    • Amaphaneli okuhlola i-IndexedDB kanye neCache manje abonisa izinto zokubala yenani eliphelele lezinsiza kusizindalwazi noma inqolobane;
      Ukukhishwa kwe-Chrome 75

  • Ezakhiweni zokuhlola zaseCanary kwengezwe ukwesekwa
    ukufinyelela i-DNS nge-HTTPS (DoH, DNS nge-HTTPS), engenziwa isebenze ku-chrome://flags#dns-over-https. I-DoH ingaba wusizo ekuvimbeleni ukuvuza kolwazi olumayelana namagama aceliwe osokhaya ngokusebenzisa amaseva e-DNS abahlinzeki, ukulwa nokuhlaselwa kwe-MITM kanye nokucekelwa phansi kwethrafikhi ye-DNS, ukubala ukuvinjwa ezingeni le-DNS, noma ukuhlela umsebenzi uma kungenakwenzeka ukufinyelela okuqondile ku-DNS. amaseva (isibonelo, lapho usebenza ngommeleli);

Ngokungeziwe ezenzweni ezintsha nokulungiswa kweziphazamisi, inguqulo entsha iyaqeda 42 ubuthakathaka. Ubungozi obuningi buhlonzwe njengomphumela wokuhlola okuzenzakalelayo ngamathuluzi IkheliSanitizer, I-MemorySanitizer, Lawula Ubuqotho Bokugeleza, I-LibFuzzer и AFL. Azikho izinkinga ezibucayi ezitholiwe ezingavumela umuntu ukuthi adlule wonke amazinga okuvikela isiphequluli futhi akhiphe ikhodi kusistimu engaphandle kwendawo ye-sandbox. Njengengxenye yohlelo lokukhokha imiklomelo yemali ngokuthola ubungozi ekukhishweni kwamanje, i-Google ikhokhele imiklomelo engu-13 ebiza u-$9000 (umklomelo owodwa wama-$5000, imiklomelo emibili ka-$1000, kanye nemiklomelo emine yama-$500). Usayizi wemiklomelo eyi-7 awukakanqunywa.

Source: opennet.ru

Engeza amazwana