Ukukhishwa kwe-Chrome 80

Google kwethulwe ukukhishwa kwesiphequluli sewebhu I-Chrome 80... Kanyekanye iyatholakala ukukhishwa okuzinzile kwephrojekthi yamahhala Chromium, esebenza njengesisekelo se-Chrome. Isiphequluli se-Chrome okuhlukile ukusetshenziswa kwezimpawu ze-Google, ukuba khona kwesistimu yokuthumela izaziso uma kwenzeka ingozi, ikhono lokulanda imojula ye-Flash uma ucelwa, amamojula wokudlala okuqukethwe kwevidiyo evikelekile (DRM), uhlelo lokufaka ngokuzenzakalelayo izibuyekezo kanye nokudlulisa ngesikhathi sokusesha Izilinganiso ze-RLZ. Ukukhishwa okulandelayo kwe-Chrome 81 kuhlelelwe umhlaka-17 Mashi.

main shintsha в Chrome 80:

• Ngephesenti elincane labasebenzisi, umsebenzi wokuqoqa amathebhu unikezwa, okuvumela ukuthi uhlanganise amathebhu amaningana anezinjongo ezifanayo ube amaqembu ahlukaniswe ngokubonakalayo. Iqembu ngalinye linganikezwa umbala walo kanye negama. Abasebenzisi abangazange bafakwe kugagasi lokuqala lokwenza kusebenze banganika amandla usekelo lweqembu ngokusebenzisa inketho ethi “chrome://flags/#tab-groups”.
  

• Kwengezwe usekelo lwalesi sici Skrola uye Embhalweni, okukuvumela ukuthi udale izixhumanisi zamagama angawodwana noma imishwana ngaphandle kokucacisa ngokusobala amalebula kudokhumenti usebenzisa ithegi "yegama" noma isici esithi "id". I-syntax yezixhumanisi ezinjalo ihlelelwe ukuthi ivunyelwe njengezinga lewebhu, elisekhona esigabeni okusalungiswa. Imaski yenguquko (empeleni ukusesha okuskrolayo) ihlukaniswa nehange elijwayelekile ngesibaluli se-“:~:". Isibonelo, uma uvula isixhumanisi "https://opennet.ru/52312/#:~:text=Chrome" ikhasi lizothuthela endaweni lapho kukhulunywa khona okokuqala igama elithi "Chrome" futhi leli gama lizogqanyiswa. .
• Kusetshenzisiwe Umkhawulo oqinile ekudlulisweni kwamakhukhi phakathi kwamasayithi, ngezicelo ezingezona eze-HTTPS, ovimbela ukucutshungulwa kwamakhukhi ezinkampani zangaphandle asethwe lapho ufinyelela amasayithi ngaphandle kwesizinda sekhasi lamanje. Amakhukhi anjalo asetshenziselwa ukulandelela ukunyakaza kwabasebenzisi phakathi kwamasayithi kukhodi yamanethiwekhi okukhangisa, amawijethi enethiwekhi yokuxhumana nomphakathi kanye nezinhlelo zokuhlaziya iwebhu. Khumbula ukuthi ukuze kulawulwe ukudluliswa kwamakhukhi, isibaluli se-SameSite esishiwo kusihloko se-Set-Cookie siyasetshenziswa, okuthi ngokuzenzakalelayo manje sisethelwe inani elithi “SameSite=Lax”, elikhawulela ukuthunyelwa kwamakhukhi ezicelweni ezingaphansi kwesizindalwazi. , njengesicelo sesithombe noma ukulayisha okuqukethwe nge-iframe evela kwenye isayithi. Amasayithi angakwazi ukukhipha ukuziphatha okuzenzakalelayo kwe-SameSite ngokubeka ngokusobala ukulungiselelwa kwekhukhi ku-SameSite=None. Nokho, inani SameSite=None for Cookie ingasethwa kuphela Imodi Evikelekile (ivumelekile ekuxhumekeni nge-HTTPS). Ushintsho luzoqala ngezigaba faka isicelo Februwari 17, ekuqaleni kumaphesenti amancane abasebenzisi, bese kancane kancane inweba ukufakwa.
• Kwengeziwe ukuvikelwa kuzaziso ezicasulayo ezihlobene nokuqinisekiswa kwemininingwane. Ngoba umsebenzi ofana nogaxekile wezicelo zesaziso sogaxekile uphazamisa ulwazi lomsebenzisi futhi uphazamisa ukunaka ezingxoxweni zokuqinisekisa, ku-Chrome 80, esikhundleni sengxoxo ehlukile, ithiphu yolwazi manje ingaboniswa kubha yekheli isexwayiso sokuthi isicelo semvume sivinjiwe, okube sekuthiwa iwa ibe yinkomba enesithombe sensimbi enqanyuliwe. Ngokuchofoza inkomba, ungenza kusebenze noma wenqabe imvume eceliwe nganoma yisiphi isikhathi esikahle. Ngokuzenzakalelayo, imodi entsha izonikwa amandla ngokukhetha kubasebenzisi abavamise ukuvimba izicelo ezinjalo, kanye nakumasayithi aqopha amaphesenti amakhulu ezicelo ezinqatshiwe. Ukuze unike amandla imodi entsha yazo zonke izicelo, inketho ekhethekile yengezwe kuzilungiselelo (chrome://flags/#quiet-notification-prompts).
  

• Kwenqatshiwe ukubonisa amawindi azivelelayo (ukubiza indlela ye-window.open()) nokuthumela i-XMLHttpRequests ehambisanayo ekhasini vala noma fihla izibambi zomcimbi (khipha, ngaphambi kokukhipha, ukufihla ikhasi kanye nokushintsha kokubonakala);
• Isiqalo esihlongozwayo ukuvikela kusukela ekulayisheni okuqukethwe kwe-multimedia okuxubile (uma izinsiza zilayishwa ekhasini le-HTTPS nge-http:// protocol). Emakhasini avulwe nge-HTTPS, izixhumanisi ze-“http://” manje sezizothathelwa indawo ngokuzenzakalelayo ngokuthi “https://” kumabhulokhi ahlobene nokudlala amafayela omsindo nevidiyo. Uma insiza yomsindo noma yevidiyo ingatholakali nge-https, khona-ke ukulandwa kwayo kuvinjiwe (ungakwazi ukumaka mathupha ukuvinjwa ngemenyu etholakala ngophawu lwelokhi kubha yekheli).

  Izithombe zizoqhubeka zilayishwa zingashintshiwe (ukulungisa okuzenzakalelayo kuzosetshenziswa ku-Chrome 81), kodwa ukuze esikhundleni sazo kufakwe ama-https noma ukuvimba izithombe, abathuthukisi besayithi banikezwa ukuthuthukiswa-okungavikelekile-izicelo kanye nezakhiwo ze-CSP ezixubile-konke. Okwemibhalo nama-iframe, ukuvinjwa kokuqukethwe okuxubile sekuvele kwasetshenziswa ngaphambilini.

• Kancane kancane Vala shaqa Ukusekelwa kwe-FTP. Ngokuzenzakalelayo, ukwesekwa kwe-FTP kusatholakala, kodwa kuzokwenzeka kwenziwe isilingo lapho ukwesekwa kwe-FTP kuzokhutshazwa kumaphesenti athile abasebenzisi (ukuze ubuyisele uzodinga ukuqalisa isiphequluli ngenketho ethi “-vula-ftp”). Masikhumbule ukuthi ekukhishweni kwangaphambilini isibonisi efasiteleni lesiphequluli sokuqukethwe kwezinsiza ezilandwe ngephrothokholi ethi “ftp://” sase sikhutshaziwe (isibonelo, ukubonisa amadokhumenti e-HTML namafayela e-README kwamiswa), ukusetshenziswa kwe-FTP kwase kuvaliwe. kunqatshelwe uma ulanda izisetshenziswa ezingaphansi kumadokhumenti, nokusekelwa kommeleli kuye kwanqanyulwa ku-FTP. Nokho, bekusengenzeka ukulanda amafayela ngezixhumanisi eziqondile futhi kuboniswe okuqukethwe kwezinkomba.
• Kwengeziwe
  ikhono lokusebenzisa izithombe ze-vector SVG njengesithonjana sesayithi (isithombe-sithombe-sithombe).

• Ikhono lokukhubaza ngokukhetha izinhlobo ezithile zedatha edluliswayo ngesikhathi sokuvumelanisa phakathi kweziphequluli lengeziwe kuzilungiselelo.
• Umthetho wengezwe kubasebenzisi bezinkampani ezilawulwa uhulumeni I-BlockExternalExtensions, okukuvumela ukuthi uvimbele ukufakwa kwezengezo zangaphandle kudivayisi.
• Kwenziwa ithuba isheke lesikhathi esisodwa salo lonke uchungechunge lwezakhiwo noma amakholi ku-JavaScript. Isibonelo, lapho ufinyelela okuthi “db.user.name.length” bekudingeka ngaphambilini ukuhlola incazelo yazo zonke izingxenye isinyathelo ngesinyathelo, isibonelo, ngokusebenzisa “uma (db && db.user && db.user.name)”. Manje usebenzisa ukusebenza "?." ungakwazi ukufinyelela inani elithi “db?.user?.name?.length” ngaphandle kokuhlola kokuqala futhi ukufinyelela okunjalo ngeke kuholele ephutheni. Esimeni sezinkinga (uma ingxenye ethile icutshungulwa njengelilize noma ingachazwanga)) okuphumayo kuzobe "kungachazwa".
• I-JavaScript yethula i-opharetha entsha yokuhlanganisa enengqondo "??", ebuyisela i-operand engakwesokudla uma i-operand yesokunxele i-NULL noma ingacacisiwe, futhi ngokuphambene nalokho. Isibonelo, "const foo = ibha ?? 'iyunithi yezinhlamvu ezenzakalelayo'" uma ibha ingasebenzi, izobuyisela inani lebha uma kungenjalo, okuhlanganisa lapho ibha ingu-0 kanye ' ', ngokuphambene ne-opharetha ethi "||".
• Kumodi Yezilingo Zomsuka (izici zokuhlola ezidinga ukuhlukaniswa ukwenza kusebenze) i-Content Indexing API ehlongozwayo. I-Origin Trial isho amandla okusebenza ne-API eshiwo ezinhlelweni ezilandwe ku-localhost noma 127.0.0.1, noma ngemva kokubhalisa nokwamukela ithokheni elikhethekile elisebenza isikhathi esilinganiselwe sesayithi elithile. I-API Inkomba yokuqukethwe, inikeza imethadatha emayelana nokuqukethwe okwakugcinwe kunqolobane ngaphambilini izinhlelo zokusebenza zewebhu ezisebenza ngemodi ye-Progressive Web Apps (PWS). Uhlelo lokusebenza lungagcina idatha ehlukahlukene ohlangothini lwesiphequluli, okuhlanganisa izithombe, amavidiyo nama-athikili, futhi lapho uxhumano lwenethiwekhi kulahleka, lusebenzise usebenzisa i-Cache Storage kanye ne-IndexedDB APIs. I-Content Indexing API yenza kube nokwenzeka ukwengeza, ukuthola nokususa izinsiza ezinjalo. Esipheqululini, le API isivele isetshenziselwa ukufaka uhlu lwamakhasi nedatha ye-multimedia etholakalayo ukuze ibukwe ungaxhunyiwe ku-inthanethi.
  

• Izinzisiwe futhi manje isatshalaliswa ngaphandle kwe-Origin Trials API Xhumana nesikhethi, okuvumela umsebenzisi ukuthi akhethe okufakiwe ebhukwini lamakheli futhi adlulisele imininingwane ethile mayelana nakho kusayithi. Isicelo sicacisa uhlu lwezakhiwo ezidinga ukubuyiswa. Lezi zakhiwo ziboniswa ngokucacile kumsebenzisi, onquma ukuthi azidlulise lezi zakhiwo noma cha. I-API ingasetshenziswa, ngokwesibonelo, kuklayenti lemeyili yewebhu ukukhetha abamukeli bencwadi ethunyelwe, kuhlelo lokusebenza lewebhu elinomsebenzi we-VoIP ukuqalisa ucingo oluya enombolweni ethile, noma kunethiwekhi yokuxhumana nomphakathi ukucinga abangani asebebhalisiwe. . Ngesikhathi esifanayo, njengengxenye Yezilingo Zomsuka, ezinye izakhiwo ezintsha ze-Contact Picker ziyanikezwa: ngaphezu kwegama eligcwele elitholakala ngaphambilini, i-imeyili nenombolo yocingo, amandla okudlulisa ikheli le-imeyili nesithombe sengeziwe.
• Kubasebenzi Bewebhu ehlongozwayo indlela entsha yokulayisha amamojula e-ECMAScript, okukuvumela ukuba ugweme ukusebenzisa umsebenzi we-importScripts(), ovimba isisebenzi ngenkathi sicubungula iskripthi esingenisiwe futhi siwusebenzise kumongo womhlaba. Indlela entsha ihlanganisa ukudala amamojula akhethekile Abasebenzi Bewebhu abasekela izindlela zokungenisa ze-JavaScript ezijwayelekile futhi angalayishwa ngamandla ngaphandle kokuvimbela ukubulawa kwabasebenzi. Ukulayisha amamojula, umakhi Womsebenzi uhlinzeka ngohlobo olusha lwensiza - 'imojula':

  Const worker = Umsebenzi omusha('worker.js', {
  uhlobo: 'module'
  });

• Kwenziwa Ikhono elakhelwe ngaphakathi le-JavaScript lokucubungula ukusakaza okucindezelwe ngaphandle kokudinga ukusetshenziswa kwamalabhulali angaphandle. Ama-API engeziwe ukuze acindezeleke futhi awohloke I-CompressionStream ne-DecompressionStream. Ukucindezela kusetshenziswa i-gzip kanye ne-deflate algorithms kuyasekelwa.

  Const compressionReadableStream
  = inputReadableStream.pipeThrough(new CompressionStream('gzip'));

• Kwengezwe impahla ye-CSS "Ikhefu lomugqa: noma kuphi", okuvumela ukunqamuka ezingeni lanoma yiluphi uhlobo lohlamvu lwe-typographic, okuhlanganisa ukuhlukana eduze kwezinhlamvu zokubhala ezichazwe izikhala ( ) naphakathi kwamagama. Kungezwe futhi impahla ye-CSS "ukugoqa: noma kuphi» ikuvumela ukuthi uphule ukulandelana okunganqamuki kwezinhlamvu noma yikuphi uma indawo efanelekile yekhefu ingatholakalanga emugqeni.
• Kokuqukethwe kwemidiya okucutshungulwe ngendlela ebethelwe, usekelo lwendlela selusetshenzisiwe I-MediaCapabilities.decodingInfo(), ehlinzeka ngolwazi mayelana namakhono esiphequluli okukhipha amakhodi okuqukethwe okuvikelwe (isibonelo, le ndlela ingasetshenziswa ukukhetha izimo zokuqopha zekhwalithi ephezulu noma ezonga amandla ngokusekelwe kumkhawulokudonsa otholakalayo kanye nosayizi wesikrini).
• Indlela eyengeziwe HTMLVideoElement.getVideoPlaybackQuality(), lapho ungathola khona ulwazi mayelana nokusebenza kabusha kokudlalwa kwevidiyo ukuze ulungise i-bitrate, ukulungiswa kanye neminye imingcele yevidiyo.
• Ku-API Isibambi Sokukhokha, okwenza kube lula ukuhlanganiswa nezinhlelo zokukhokha ezikhona, yengeze ikhono izithunywa ukucutshungulwa kwekheli kanye nolwazi lokuxhumana kumcubunguli wangaphandle wesistimu yokukhokha (uhlelo lokusebenza lwesistimu yokukhokha lungaba nolwazi olunembe kakhulu kunesiphequluli).
• Kwengezwe usekelo lwesihloko se-HTTP I-Sec-Fetch-Dest, ekuvumela ukuthi uthumele imethadatha eyengeziwe mayelana nohlobo lokuqukethwe okuhlotshaniswa nesicelo (isibonelo, ngesicelo nge-img tag, uhlobo luthi “isithombe”, samafonti - “ifonti”, yemibhalo - “script”, ngezitayela - "isitayela", njll. ). Ngokusekelwe ohlotsheni olushiwo, iseva ingathatha izinyathelo zokuvikela ezinhlotsheni ezithile zokuhlaselwa (isibonelo, akunakwenzeka ukuthi isixhumanisi esiya kusiphathi sokudlulisa imali sicaciswe nge-img tag, ngakho izicelo ezinjalo azidingeki kusetshenzwe).
• Enjinini ye-JavaScript V8 ukwenziwa ngcono kwenziwe ukugcina izikhombisi enqwabeni. Esikhundleni sokugcina inani eligcwele le-64-bit, kugcinwa kuphela izingcezu ezingezansi ezihlukile zesikhombisi. Lokhu kulungiselelwa kwenza kwaba nokwenzeka ukunciphisa ukusetshenziswa kwenkumbulo yenqwaba ngo-40%, ngezindleko zesigwebo sokusebenza sika-3-8%.
  
  

• Izinguquko kumathuluzi onjiniyela bewebhu:
  • Ikhonsoli yewebhu manje inamandla okuchaza kabusha izisho ze-let nezigaba.
    

  • Amathuluzi okulungisa amaphutha e-WebAssembly athuthukisiwe. Ukwesekwa okwengeziwe I-DWARF ukuze kulungiswe iphutha ngesinyathelo ngasinye, kucaciswe izindawo zokunqamuka, nokuhlaziya ukulandelelwa kwesitaki kukhodi yomthombo lapho kubhalwa khona uhlelo lwe-WebAssembly.
    

  • Iphaneli ethuthukisiwe yokuhlaziya umsebenzi wenethiwekhi. Kwengezwe ikhono lokubuka uchungechunge lwezingcingo zeskripthi ezihlotshaniswa nokuqaliswa kwesicelo.
    

    Kwengezwe Umzila omusha namakholomu e-URL abonisa indlela ephelele ne-URL egcwele yesisetshenziswa senethiwekhi ngasinye. Iqinisekisa ukuthi umbuzo okhethiwe ugqanyisiwe kumdwebo wokubuka konke.

    

  • Kuthebhu Yezimo Zenethiwekhi, inketho yengeziwe ukuze kushintshwe ipharamitha Yomenzeli Womsebenzisi.
    

  • Kuphakanyiswe isixhumi esibonakalayo esisha ukuze kumiswe iphaneli yokuhlola.
    

  • Kuthebhu Ukuhlanganisa inikeze ukukhetha kokuqoqa idatha yokukhava yomsebenzi ngamunye noma ibhulokhi yekhodi ngayinye (izibalo ezinemininingwane eminingi, kodwa idinga izinsiza ezengeziwe).
    

• Isenzo se-AppCache manifest (ubuchwepheshe bokuhlela ukusebenza kohlelo lokusebenza lwewebhu kumodi engaxhunyiwe ku-inthanethi) okulinganiselwe uhla lwemibhalo lwamanje lwesayithi (uma i-manifest ilandwe ku-www.example.com/foo/bar/, khona-ke amandla okukhipha i-URL azosebenza kuphela ngaphakathi kokuthi /foo/bar/). Ukusekelwa kwe-AppCache kuhlelwe ukuthi kususwe ngokuphelele ku-Chrome 82. Isizathu esibaluliwe isifiso sokususa enye ye-vector yokuhlaselwa kwemibhalo ephambanayo. Kunconywa ukusebenzisa i-API esikhundleni se-AppCache ikhava.
• Kunqanyuliwe usekelo lwefa le-WebVR 1.1 API, elingathathelwa indawo i-API Idivayisi ye-WebXR, okukuvumela ukuthi ufinyelele izingxenye zokudala okungokoqobo nokungathandwa kwabathelisi esikubona futhi uhlanganise umsebenzi ngamakilasi ahlukahlukene wamadivayisi, kusukela kuzigqoko zokuzivikela zangempela ezimile kuya kuzixazululo ezisekelwe kumadivayisi eselula.
• Izibambi zephrothokholi ezixhunywe ngerejistaProtocolHandler() nezindlela ze-unregisterProtocolHandler() manje zingasebenza kuphela kungqikithi evikelekile (uma ifinyelelwa nge-HTTPS).

Ngokungeziwe ezenzweni ezintsha nokulungiswa kweziphazamisi, inguqulo entsha iyaqeda 56 ubuthakathaka. Ubungozi obuningi buhlonzwe njengomphumela wokuhlola okuzenzakalelayo ngamathuluzi IkheliSanitizer, I-MemorySanitizer, Lawula Ubuqotho Bokugeleza, I-LibFuzzer и AFL. Azikho izinkinga ezibucayi ezitholiwe ezingavumela umuntu ukuthi adlule wonke amazinga okuvikela isiphequluli futhi akhiphe ikhodi kusistimu engaphandle kwendawo ye-sandbox. Njengengxenye yohlelo lokukhokha imiklomelo yemali ngokuthola ubungozi ekukhishweni kwamanje, i-Google ikhokhele imiklomelo engu-37 ebiza u-$48 10000 (umklomelo owodwa ka-$5000, imiklomelo emithathu ka-$3000, imiklomelo emithathu ka-$2000, imiklomelo emine yama-$1000, imiklomelo emithathu ka-$500 kanye nemiklomelo eyisithupha yama-$17). Ubukhulu bemiklomelo engu-XNUMX abukakaziwa.

Source: opennet.ru