Ukukhishwa kwe-Chrome 81

Google kwethulwe ukukhishwa kwesiphequluli sewebhu I-Chrome 81... Kanyekanye iyatholakala ukukhishwa okuzinzile kwephrojekthi yamahhala Chromium, esebenza njengesisekelo se-Chrome. Isiphequluli se-Chrome okuhlukile ukusetshenziswa kwezimpawu ze-Google, ukuba khona kwesistimu yokuthumela izaziso uma kwenzeka ingozi, ikhono lokulanda imojula ye-Flash uma ucelwa, amamojula wokudlala okuqukethwe kwevidiyo evikelekile (DRM), uhlelo lokufaka ngokuzenzakalelayo izibuyekezo kanye nokudlulisa ngesikhathi sokusesha Izilinganiso ze-RLZ. I-Chrome 81 ibihlelelwe ukuthi ishicilelwe ngoMashi 17, kodwa ngenxa yobhubhane lwe-SARS-CoV-2 kanye nokudluliselwa kwabathuthukisi ukuthi basebenze ekhaya, ukukhululwa kwabambezeleka. kuhlehlisiwe. Ukukhishwa okulandelayo kwe-Chrome 82 kuzoba uphuthelwe, I-Chrome 83 ihlelelwe ukukhishwa ngoMeyi 19.

main shintsha в Chrome 81:

  • Ukuqaliswa kwaqhubeka ukuvikelwa kusukela ekulayisheni okuqukethwe kwe-multimedia okuxubile (uma izinsiza zilayishwa ekhasini le-HTTPS nge-http:// protocol). Emakhasini avulwe nge-HTTPS, izixhumanisi ze-“http://” manje sezizothathelwa indawo ngokuzenzakalelayo ngokuthi “https://” lapho kulayishwa izithombe, imibhalo, ama-iframe, amafayela omsindo namavidiyo, asetshenziswe ekukhishweni kokugcina. Uma isithombe singatholakali nge-https, khona-ke ukulandwa kwaso kuvinjiwe (ungakwazi ukumaka mathupha ukuvinjwa ngemenyu etholakala ngophawu lwelokhi kubha yekheli).
  • Ikhutshaziwe Ukusekelwa kwephrothokholi ye-FTP. Ekukhishweni okulandelayo wonke amakhodi ahlobene ne-FTP izosuswa kusukela kusisekelo sekhodi. Ukuze ufinyelele nge-FTP, kuyanconywa ukusebenzisa amaklayenti e-FTP angaphandle. Okwesikhashana, ukwesekwa kwe-FTP kungabuyiswa kusetshenziswa ifulegi elithi "--enable-ftp" noma elithi "--enable-features=FtpProtocol".
  • Isici sokuqoqa ithebhu sinikwe amandla kubo bonke abasebenzisi, okukuvumela ukuthi uhlanganise amathebhu ambalwa anezinjongo ezifanayo ube amaqembu ahlukaniswe ngokubonakalayo. Iqembu ngalinye linganikezwa umbala walo kanye negama. Ngaphambilini, ukuqoqwa kwamathebhu bekuhlinzekwa kuphela ukuze kuhlolwe iphesenti elincane labasebenzisi.

    Ukukhishwa kwe-Chrome 81

  • Ku-API Idivayisi ye-WebXR wengeze usekelo lwedivayisi ukungathandwa kwabathelisi esikubona. I-WebXR API ikuvumela ukuthi uhlanganise umsebenzi ngamakilasi ahlukahlukene wamadivayisi, kusukela kumahedisethi akhona anganyakazi kuya ezixazululweni ezisekelwe kumadivayisi eselula. Kuphakanyiswe i-API entsha ukuze kudalwe izinhlelo zokusebenza ezingokoqobo ezingathandwa kwabathelisi esikubona I-Web XR Hit Test, okukuvumela ukuthi ubeke izinto ezibonakalayo endaweni yokubuka yekhamera, ebonisa iqiniso. Ngokwesibonelo, ungakwazi isibonisi imbali ebonakalayo efasiteleni eqoshwe ngekhamera, ebonisa izimpawu zolwazi phezu kwezinto, noma ukuhlela ifenisha ebonakalayo ngenkathi kuqoshwa igumbi elingenalutho.

    Ukukhishwa kwe-Chrome 81Ukukhishwa kwe-Chrome 81

  • Uma ulondoloza igama-mfihlo kusiphathi sephasiwedi esakhelwe ngaphakathi, isexwayiso siyavezwa uma igama-mfihlo lifakwe kusayithi elingavikelekile.
  • Kuthunyelwe shintsha emigomeni yokusebenzisa ye-Google (Imibandela Yokusebenzisa yeGoogle), lapho avela khona ingxenye ehlukene ye-Google Chrome ne-Chrome OS.
  • Imodi ye-Incognito namaseshini esivakashi anokuqinisekisa kwe-NTLM/Kerberos kukhutshazwe ngokuzenzakalela.
  • Ukuqaliswa kwe-TLS 1.3 kufaka phakathi izindlela ezithuthukisiwe zokulwa nokwehliselwa kwezinguqulo zangaphambili zephrothokholi ye-TLS. Ngaphambilini, ukuvikelwa kokubuyisela emuva kwenguqulo yephrothokholi bekunikwe amandla kancane kuphela ngenxa yokungahambisani namanye amaseva abambayo asebenza ngokungalungile (i-Palo Alto Networks PAN-OS, i-Cisco Firepower Threat Defense, i-ASA ene-FirePOWER). Izinkinga zokusebenzisana manje seziyinto yesikhathi esidlule, njengoba abathengisi abaningi balawo ma-proxies bekhiphe izibuyekezo ukuze benze ukuqaliswa kwabo kwe-TLS kuhambisane nezicaciso.
  • Kwengezwe inketho ethi “chrome://flags/#treat-unsafe-downloads-as-active-content” kuzilungiselelo, okukuvumela ukuthi unike amandla izexwayiso uma uzama ibhuthi engaphephile amafayela asebenzisekayo ngezixhumanisi ezivela emakhasini e-HTTPS (ku-Chrome 83, izexwayiso ezinjalo zizoboniswa ngokuzenzakalela, futhi ku-Chrome 84, ukulanda kuzovinjelwa).
  • Usekelo lwe-API lwengezwe kumadivayisi eselula Iwebhu ye-NFC, okuvumela izinhlelo zokusebenza zewebhu ukuthi zifunde futhi zibhale omaka be-NFC. Izibonelo zokusebenzisa i-API entsha ezinhlelweni zewebhu zifaka phakathi ukuhlinzeka ngolwazi mayelana nemibukiso yasemnyuziyamu, ukwenza uhlu lwempahla, ukuthola ulwazi kumabheji ababambiqhaza benkomfa, njll. Omaka bathunyelwa futhi baskenwe kusetshenziswa izinto ze-NDEFWriter kanye ne-NDEFReader. I-API entsha okwamanje itholakala kuphela kumodi ye-Origin Trials (izici zokuhlola ezidinga ukuhlukaniswa ukwenza kusebenze). I-Origin Trial isho amandla okusebenza ne-API eshiwo ezinhlelweni ezilandwe ku-localhost noma 127.0.0.1, noma ngemva kokubhalisa nokwamukela ithokheni elikhethekile elisebenza isikhathi esilinganiselwe sesayithi elithile.
  • Kumodi yesilingo soqobo, i-PointerLock API inikeza ifulegi unadjustedMovement, lapho ifakiwe, idatha mayelana nemicimbi yokunyakaza kwegundane idluliselwa ngendlela yayo emsulwa, ngaphandle kokulungiswa noma ukusheshisa.
  • Izinzisiwe futhi manje isatshalaliswa ngaphandle kwe-Origin Trials API Ukubheda, okuvumela izinhlelo zokusebenza zewebhu ukuthi zenze izinkomba ezivela kuphaneli noma esikrinini sasekhaya. Uma uvala ikhasi, inkomba ikhishwa ngokuzenzakalelayo. Isibonelo, ngendlela efanayo ungaveza inombolo yemiyalezo engafundiwe noma ulwazi mayelana nemicimbi ethile;

    Ukukhishwa kwe-Chrome 81

  • Kwengezwe ku-Media Session API ithuba ukulandelela indawo lapho udlala ingoma. Ungathola ulwazi mayelana nesivinini sokudlala, ubude besikhathi kanye nesikhathi sokudlala samanje, esikuvumela ukuthi uzenzele ezakho izixhumanisi zokuhlola indawo nokuhamba eduze kwethrekhi.

    Ukukhishwa kwe-Chrome 81

  • I-INTL API isebenzisa indlela DisplayNames, lapho ungathola khona amagama enziwe endawo ezilimi, amazwe, izimali, izici zedethi, njll.
  • Ku-API I-PerformanceObserver, eklanyelwe ukuqoqa idatha mayelana nesimo sezinsiza ngenkathi umsebenzisi esebenza nohlelo lokusebenza lwewebhu, kwenziwe ikhono lokusebenzisa ifulegi "eligcinwe ku-buffer" ngemisebenzi ehlala isikhathi eside.
  • Ngokuzenzakalelayo, i-Chrome izothatha ulwazi lokuma ku-akhawunti olusuka kumethadatha ye-EXIF ​​lapho inikezela ngezithombe. Ukuze ukhiphe ngokusobala lokhu kuziphatha, indawo ye-CSS "umumo wesithombe" iyaphakanyiswa.
  • Kwengezwe i-meta tag kanye nempahla ye-CSS "uhlelo lombala", okukuvumela ukuthi ukhethe uhlelo lombala lokunikezela ngezinto zokusebenzelana, njengezinkinobho zefomu namabha okuskrola.
  • Kwengezwe isibaluli ku-HTMLAnchorElement hrefTranslate, lapho ungakwazi ukudlulisa ulwazi mayelana nesidingo sokuhumushela ikhasi kolunye ulimi ngemva kokuchofoza isixhumanisi.
  • Kwengezwe uhlobo olusha lomcimbi ThumelaEvent, okufaka izakhiwo ezintsha ezikuvumela ukuthi uthole isici okholi lwaso oluholele ekuhanjisweni kwefomu. Isibonelo, i-SundEvent yenza kube nokwenzeka ukusebenzisa isibambi esisodwa esivamile ezinkinobho nezixhumanisi ezihlukahlukene eziholela ekuhanjisweni kwefomu.
  • Ukuthuthuka kumathuluzi onjiniyela bewebhu:
    • Kwengezwe inketho ethi “Kopisha > Kopisha njenge-Node.js ukulanda” kumenyu yokuqukethwe eboniswa kuzicelo zenethiwekhi zokukopishwa ngendlela yokulanda ehlanganisa idatha ye-Cookie.
    • Ithiphu yamathuluzi enenguqulo engabalekelwanga yedatha manje iyaboniswa uma uhambisa igundane phezu kwezici ze-CSS "zokuqukethwe".
    • Kukhonsoli yewebhu, imininingwane yemilayezo yephutha uma kucozululwa izinkambu kumephu yomthombo inyusiwe.
    • Kwengezwe isilungiselelo esithi “Okuncanyelwayo > Imithombo > Vumela ukuskrola ekupheleni kwefayela”, okukuvumela ukuthi ukhubaze ukuskrola udlule ekugcineni kwefayela lapho ubuka umbhalo womthombo wekhasi.
    • Ukulingiswa kwesikrini kwe-smartphone ye-Moto G4 kungeziwe kuphaneli yedivayisi.
      Ukukhishwa kwe-Chrome 81

    • Iphaneli yama-Cookies inikeza ukugqama kwengemuva eliphuzi kuma-cookies avinjiwe.
    • Ikholomu enedatha yokubalulekile kokukhetha Ikhukhi yengezwe kumathebula Amakhukhi aboniswe Kuphaneli Yenethiwekhi kanye Nesicelo.
    • Zonke izinkambu (ngaphandle kwenkambu kasayizi) kumathebula anamakhukhi manje ziyahleleka.
      Ukukhishwa kwe-Chrome 81

  • Ukuxhuma ukwesekwa kwephrothokholi ye-TLS 1.0 ne-TLS 1.1 kuhlehlisiwe kuze kukhishwe i-Chrome 84. Ukunika amandla nakho kubambezelekile kuze kukhishwe i-Chrome 83. okusha ukubhaliswa izakhi amafomu ewebhu alungiselelwe ukusetshenziswa ezikrinini zokuthintwa.

Ngokungeziwe ezenzweni ezintsha nokulungiswa kweziphazamisi, inguqulo entsha iyaqeda 32 ubuthakathaka. Ubungozi obuningi buhlonzwe njengomphumela wokuhlola okuzenzakalelayo ngamathuluzi IkheliSanitizer, I-MemorySanitizer, Lawula Ubuqotho Bokugeleza, I-LibFuzzer и AFL. Azikho izinkinga ezibucayi ezitholiwe ezingavumela umuntu ukuthi adlule wonke amazinga okuvikela isiphequluli futhi akhiphe ikhodi kusistimu engaphandle kwendawo ye-sandbox. Njengengxenye yohlelo lokuklomelisa ngemali yokuthola ubungozi ekukhishweni kwamanje, i-Google ikhokhele imiklomelo engu-23 ebiza u-$26 (umklomelo owodwa ka-$7500, umklomelo owodwa ka-$5000, umklomelo owodwa ka-$3000, imiklomelo emibili ka-$2000, imiklomelo emithathu ka-$1000, kanye nemiklomelo eyisishiyagalombili yama-$500). Usayizi wemiklomelo eyi-7 awukakanqunywa.

Source: opennet.ru

Engeza amazwana