Ukukhishwa kwe-Chrome 86

Google kwethulwe ukukhishwa kwesiphequluli sewebhu I-Chrome 86... Kanyekanye iyatholakala ukukhishwa okuzinzile kwephrojekthi yamahhala Chromium, esebenza njengesisekelo se-Chrome. Isiphequluli se-Chrome okuhlukile ukusetshenziswa kwezimpawu ze-Google, ukuba khona kwesistimu yokuthumela izaziso uma kwenzeka ingozi, ikhono lokulanda imojula ye-Flash uma ucelwa, amamojula wokudlala okuqukethwe kwevidiyo evikelekile (DRM), uhlelo lokufaka ngokuzenzakalelayo izibuyekezo kanye nokudlulisa ngesikhathi sokusesha Izilinganiso ze-RLZ. Ukukhishwa okulandelayo kwe-Chrome 87 kuhlelelwe uNovemba 17.

main shintsha в Chrome 86:

• Ukuvikelwa okwengeziwe ekuthunyelweni okungaphephile kwamafomu okufakwayo emakhasini alayishwe nge-HTTPS kodwa ukuthumela idatha nge-HTTP, okudala usongo lokuphazanyiswa kwedatha kanye nokukhwabanisa phakathi nokuhlaselwa kwe-MITM. Ukuvikelwa kwehlela ezinguqukweni ezintathu:
  • Ukugcwaliswa ngokuzenzakalela kwanoma yimaphi amafomu okokufaka okuxubile kukhutshaziwe, okufana nendlela ukugcwalisa okuzenzakalelayo kwamafomu okufakazela ubuqiniso emakhasini avulwe nge-HTTP kukhutshazwe isikhathi eside. Uma ngaphambilini uphawu lokukhubaza beluvula ikhasi elinefomu nge-HTTPS noma i-HTTP, manje ukusetshenziswa kokubethela lapho kuthunyelwa idatha kusibambi sefomu nakho kuyacatshangelwa. Umphathi wephasiwedi wezinhlobo ezixubile zokufakazela ubuqiniso akakhutshazwanga, njengoba ubungozi bokusebenzisa igama-mfihlo elingavikelekile nokusebenzisa kabusha amagama ayimfihlo kumasayithi ahlukene budlula ubungozi bokuphazamiseka kwethrafikhi okungaba khona.
  • Lapho kuqala ukungena ngamafomu axubile, kuboniswa isixwayiso esazisa umsebenzisi ukuthi idatha egcwalisiwe ithunyelwa ngeshaneli yokuxhumana engabhaliwe.
  • Uma uzama ukuhambisa ifomu elixubile, ikhasi elihlukile liyaboniswa likwazisa ngengozi engaba khona yokudlulisa idatha ngesiteshi sokuxhumana esingabetheliwe. Ezinguqulweni zangaphambilini, inkomba yelokhi kubha yekheli yasetshenziselwa ukukhombisa amafomu axubile, kodwa lokhu kumaka bekungabonakali kubasebenzisi futhi akuzange kubonise ngempumelelo ubungozi obuhilelekile.
    

• Ukuvimba ibhuthi engaphephile (ngaphandle kokubethela) kwamafayela asebenzisekayo kulekelelwa ngokuvimba ukulayishwa okungaphephile kwezingobo zomlando (i-zip, i-iso, njll.) nokubonisa izexwayiso zokulayisha okungaphephile.
  imibhalo (docx, pdf, njll.). Ukuvinjwa kwedokhumenti nezixwayiso zezithombe, umbhalo, namafayela emidiya kulindeleke ekukhishweni okulandelayo. Ukuvimbela kwenziwa ngoba ukulanda amafayela ngaphandle kokubethela kungasetshenziswa ukwenza izenzo ezinonya ngokufaka okuqukethwe esikhundleni sokuhlasela kwe-MITM.

• Imenyu yokuqukethwe ezenzakalelayo ibonisa inketho ethi "Bonisa njalo i-URL egcwele", obekudingeka ngaphambilini ukuthi kushintshwe izilungiselelo kukhasi elithi:amafulegi ukuze lisebenze. I-URL egcwele ingabuye ibukwe ngokuchofoza kabili kubha yekheli. Ake sikhumbule ukuthi kusukela I-Chrome 76 Ngokuzenzakalelayo, ikheli laqala ukuboniswa ngaphandle kwephrothokholi kanye nesizinda esingaphansi kwe-www. IN I-Chrome 79 isilungiselelo sokubuyisela ukuziphatha okudala sisusiwe, kodwa ngemva kokunganeliseki komsebenzisi nge I-Chrome 83 Ifulegi elisha lokuhlola lengeziwe elengeza inketho kumenyu yokuqukethwe ukuze ukhubaze ukufihla nokubonisa i-URL egcwele kunoma yiziphi izimo.
• Kwethulwe iphesenti elincane labasebenzisi ukuhlola on isibonisi Ngokuzenzakalelayo, ibha yekheli iqukethe kuphela isizinda, ngaphandle kwezinto zendlela kanye nemingcele yemibuzo. Isibonelo, esikhundleni sokuthi "https://example.com/secure-google-sign-in/" izobonisa "example.com". Imodi ehlongozwayo kulindeleke ukuthi ilethwe kubo bonke abasebenzisi kokunye kokukhishwayo okulandelayo. Ukuze ukhubaze lokhu kuziphatha, ungasebenzisa inketho ethi “Bonisa njalo i-URL egcwele”, futhi ukuze ubuke yonke i-URL, ungachofoza ibha yekheli. Inhloso yalolu shintsho isifiso sokuvikela abasebenzisi ebugebengwini bokweba imininingwane ebucayi obukhohlisa izinhlaka ku-URL - abahlaseli bathatha ithuba lokunganaki kwabasebenzisi ukuze benze ukubonakala kokuvula elinye isayithi nokwenza izenzo zokukhwabanisa (uma ukushintshwa okunjalo kubonakala kumsebenzisi onekhono lobuchwepheshe. , khona-ke abantu abangenalwazi bawela kalula ekukhohliseni okunjalo okulula).
• Kuqaliswe kabusha isinyathelo ukususa ukwesekwa kwe-FTP. Ku-Chrome 86, i-FTP ikhutshaziwe ngokuzenzakalela cishe ku-1% wabasebenzisi, futhi ku-Chrome 87 ububanzi bokukhubaza buzokhushulelwa ku-50%, kodwa ukusekelwa kungabuyiswa kusetshenziswa i-"--enable-ftp" noma "- -enable-features=FtpProtocol" ifulegi. Ku-Chrome 88, usekelo lwe-FTP luzokhutshazwa ngokuphelele.
• Enguqulweni ye-Android, efana nenguqulo yezinhlelo zedeskithophu, umphathi wephasiwedi usebenzisa isheke lokungena okulondoloziwe namagama-mfihlo ngokumelene nesizindalwazi sama-akhawunti onakalisiwe, abonise isexwayiso uma izinkinga zitholwa noma kwenziwa umzamo wokusebenzisa amagama ayimfihlo angasho lutho. Ukuhlolwa kwenziwa ngokumelene nesizindalwazi esihlanganisa ama-akhawunti onakalisiwe angaphezu kwezigidigidi ezi-4 avele kuzigcinilwazi zabasebenzisi eziputshuziwe. Ukugcina ubumfihlo kuyasebenza Isiqalo se-hashi siqinisekiswa ngasohlangothini lomsebenzisi, futhi amagama ayimfihlo ngokwawo kanye nama-hashi awo agcwele akudluliselwa ngaphandle.
• Iyatholakala futhi ngenguqulo ye-Android kuqhutshekwe ngale inkinobho "Ukuhlola ukuphepha" kanye nemodi yokuvikela ethuthukisiwe kumasayithi ayingozi (Ukuphequlula Okuphephile Okuthuthukisiwe). Inkinobho ethi "Ukuhlola ukuphepha" ibonisa isifinyezo sezinkinga zokuphepha ezingaba khona, ezifana nokusetshenziswa kwamagama ayimfihlo onakalisiwe, isimo sokuhlola amasayithi anonya (Ukuphequlula Okuphephile), ukuba khona kwezibuyekezo ezikhishiwe, kanye nokuhlonza izengezo ezinonya. Imodi yokuvikela ethuthukile yenza kusebenze ukuhlola okwengeziwe ukuze kuvikelwe ebugebengwini bokweba imininingwane ebucayi, umsebenzi oyingozi nezinye izinsongo kuwebhu, futhi ihlanganisa ukuvikeleka okwengeziwe kwe-akhawunti yakho ye-Google namasevisi e-Google (i-Gmail, IDrayivu, njll.). Uma kumodi evamile yokuphequlula okuphephile ukuhlolwa kwenziwa endaweni kusetshenziswa isizindalwazi esilayishwa ngezikhathi ezithile ohlelweni lweklayenti, bese kokuthi Ulwazi Lokuphequlula Okuthuthukisiwe olumayelana namakhasi nokulandwa ngesikhathi sangempela luthunyelwa ukuze luqinisekiswe ohlangothini lwe-Google, okukuvumela ukuthi uphendule ngokushesha izinsongo ngokushesha ngemva kokukhonjwa, ngaphandle kokulinda kuze kube yilapho uhlu oluvinjelwe lwendawo lubuyekezwa.
• Kwengeziwe ukusekela ifayela lenkomba elithi “.well-known/change-password”, lapho abanikazi besayithi bangacacisa khona ikheli lefomu lewebhu lokushintsha iphasiwedi. Uma imininingwane yomsebenzisi isengozini, i-Chrome manje izotshela umsebenzisi ngokushesha ngefomu lokushintsha iphasiwedi elisuselwe kulwazi olukuleli fayela.
• Isexwayiso esisha "seThiphu Lokuphepha" sisetshenzisiwe, siboniswa lapho kuvulwa amasayithi isizinda sawo sifana kakhulu nesinye isayithi futhi i-heuristics ibonisa ukuthi kukhona amathuba aphezulu okukhwabanisa (isibonelo, i-google.com ivuliwe esikhundleni se-google.com).
• Kwenziwa ukusekela inqolobane Yokudlulela phambili, enikeza ukuzulazula okusheshayo lapho usebenzisa izinkinobho "Emuva" kanye "Dlulisa" noma lapho uzulazula emakhasini abukwe ngaphambilini esayithi yamanje. Inqolobane inikwe amandla kusetshenziswa isethingi ye-chrome://flags/#back-forward-cache.
• Ukuthuthukisa ukusetshenziswa kwezinsiza ze-CPU ngamawindi kwenziwe
  ngaphandle kwendawo. I-Chrome ihlola ukuthi ingabe iwindi lesiphequluli ligqitshwe ngamanye amawindi futhi ivimbela ukudweba amaphikseli ezindaweni ezigqagqene. Lokhu kulungiselelwa kunikwe amandla kumaphesenti amancane wabasebenzisi ku-Chrome 84 naku-85 futhi manje sekunikwe amandla yonke indawo. Uma kuqhathaniswa nokukhishwa kwangaphambilini, ukungahambisani nezinhlelo ze-virtualization okubangele ukuthi kuvele amakhasi amhlophe angenalutho nakho sekuxazululiwe.

• Ukwenyuswa kokusikwa kwensiza kumathebhu angemuva. Amathebhu anjalo awasakwazi ukusebenzisa ngaphezu kuka-1% wezinsiza ze-CPU futhi angenziwa asebenze isikhathi esingaphezu kwesisodwa ngomzuzu. Ngemuva kwemizuzu emihlanu yokuba ngemuva, amathebhu ayamiswa, ngaphandle kwamathebhu adlala okuqukethwe kwe-multimedia noma okurekhodiwe.
• Sebenza kwi ubunye Unhlokweni we-HTTP Umsebenzisi-Umenzeli. Enguqulweni entsha, ukusekela kwendlela kwenziwa kusebenze kubo bonke abasebenzisi Izeluleko Zeklayenti Lomsebenzisi-Umenzeli, ithuthukiswe njengokumiselela Umenzeli Womsebenzisi. Indlela entsha ihlanganisa ngokukhetha ukubuyisela idatha mayelana nemingcele ethile yesiphequluli kanye nesistimu (inguqulo, inkundla, njll.) kuphela ngemva kwesicelo seseva futhi inikeze abasebenzisi ithuba lokuhlinzeka ngolwazi olunjalo kubanikazi besayithi. Uma usebenzisa Amacebo Weklayenti Lomenzeli Womsebenzisi, isihlonzi asidluliswa ngokuzenzakalelayo ngaphandle kwesicelo esicacile, okwenza ukuhlonza okungenzi lutho kungenzeki (ngokuzenzakalelayo, kuboniswa igama lesiphequluli kuphela).
• Inkomba yokuba khona kwesibuyekezo nesidingo sokuqala kabusha isiphequluli ukuze usifake sishintshiwe. Esikhundleni somcibisholo onemibala, "Ukubuyekeza" manje kuvela kunkambu ye-avatar ye-akhawunti.
  

• Kwenziwe umsebenzi wokuguqula isiphequluli ukuthi sisebenzise amagama asetshenziswayo. Emagameni enqubomgomo, igama elithi “whitelist” nelithi “blacklist” athathelwe indawo ngokuthi “uhlu lwabagunyaziwe” kanye “nohlu lokuvimbela” (izinqubomgomo esezingeziwe zizoqhubeka nokusebenza, kodwa zizobonisa isexwayiso mayelana nokuhoxiswa). IN ikhodi и amagama amafayela izinkomba ezithi "uhlu lwabamnyama" zithathelwe indawo ngokuthi "uhlu lokuvimba".
  Izinkomba ezibonakala ngabasebenzisi ze-"blacklist" kanye "nohlu olumhlophe" zishintshiwe ekuqaleni kuka-2019.

• Kwengezwe ikhono lokuhlola lokuhlela amaphasiwedi alondoloziwe, lenziwe lasebenza kusetshenziswa ifulegi elithi “chrome://flags/#edit-passwords-in-settings”.
• Iguqulelwe ku-API ezinzile nesesidlangalaleni Isistimu Yefayela Yomdabu, okukuvumela ukuthi udale izinhlelo zokusebenza zewebhu ezisebenzisana namafayela ohlelweni lwamafayela wendawo. Isibonelo, i-API entsha ingase idingeke ezindaweni ezihlanganisiwe zokuthuthukiswa okusekelwe kusiphequluli, umbhalo, izithombe nabahleli bevidiyo. Ukuze ukwazi ukubhala ngokuqondile nokufunda amafayela noma ukusebenzisa izingxoxo ukuze uvule futhi ulondoloze amafayela, kanye nokuzulazula kokuqukethwe kwezinkomba, uhlelo lokusebenza lucela umsebenzisi ukuqinisekiswa okukhethekile.
  

• Kwengezwe isikhethi se-CSS ":kugxilwe-kuyabonakala", esebenzisa ama-heuristics afanayo asetshenziswa isiphequluli lapho sinquma ukuthi izobonisa yini inkomba yoshintsho (lapho uhambisa ukugxila enkinobho usebenzisa izinqamuleli zekhibhodi, inkomba iyavela, kodwa uma uchofoza ngegundane, ayikwenzi). Isikhethi se-CSS esitholakala ngaphambilini ":focus" sihlala sigqamisa ukugxila.
  Ngaphezu kwalokho, inketho ethi "I-Quick Focus Highlight" yengezwe kuzilungiselelo, uma inikwe amandla, inkomba eyengeziwe yokugxila izoboniswa eduze kwezakhi ezisebenzayo, ezihlala zibonakala ngisho noma izici zesitayela zokugqanyiswa kokubukwayo kokugxila zikhutshaziwe ekhasini ngokusebenzisa. CSS.

• Ama-API amaningana amasha engeziwe kumodi ye-Origin Trials (izici zokuhlola ezidinga ukwenziwa kusebenze okuhlukile). I-Origin Trial isho amandla okusebenza ne-API eshiwo ezinhlelweni ezilandwe ku-localhost noma 127.0.0.1, noma ngemva kokubhalisa nokwamukela ithokheni elikhethekile elisebenza isikhathi esilinganiselwe sesayithi elithile.
  • I-WebHID API ngokufinyelela kwezinga eliphansi kumadivayisi e-HID (amadivayisi okusebenza komuntu, amakhibhodi, amagundane, ama-gamepad, amaphaneli wokuthinta), okukuvumela ukuthi usebenzise ingqondo yokusebenza nedivayisi ye-HID ku-JavaScript ukuhlela umsebenzi ngamadivayisi angavamile we-HID ngaphandle kokuba khona kwabashayeli abathile. ohlelweni.
    Okokuqala, i-API entsha ihloselwe ukuhlinzeka ngosekelo lwama-gamepad.

  • Ulwazi Lwesikrini se-API, inweba i-Window Placement API ukuze isekele ukulungiselelwa kwezikrini eziningi. Ngokungafani ne-window.screen, i-API entsha ikuvumela ukuthi ulawule ukubekwa kwewindi endaweni yonke yesikrini yamasistimu okuqapha okuningi, ngaphandle kokukhawulelwa esikrinini samanje.
  • I-Meta tag ukonga ibhethri, isayithi elingazisa ngalo isiphequluli mayelana nesidingo sokuvula amamodi ukuze kuncishiswe ukusetshenziswa kwamandla nokwandisa umthwalo we-CPU.
  • API Ukubika kwe-COOP ukubika ukwephulwa okungenzeka kwemithetho yokuzihlukanisa Inqubomgomo Ye-Cross-Origin-Embedder (COEP) kanye Inqubomgomo Ye-Cross-Origin-Opener (COOP), ngaphandle kokusebenzisa imikhawulo yangempela.
  • Ku-API Ukuphathwa kokuqinisekisa kuhlongozwe uhlobo olusha lwemininingwane I-PaymentCredential, enikeza isiqinisekiso esengeziwe senkokhelo eyenziwayo. Iqembu elithembekile, njengebhange, linamandla okwenza ukhiye osesidlangalaleni, i-PublicKeyCredential, engacelwa umthengisi ukuze kuqinisekiswe inkokhelo eyengeziwe evikelekile.
• Ku-API I-PointerEvents ukuze kunqunywe ukutsheka kwe-stylus, usekelo lwengeziwe lwama-engeli obude (i-engeli ephakathi kwe-stylus nesikrini) kanye ne-azimuth (i-engeli ephakathi kwe-axis engu-X kanye nokugqama kwe-stylus esikrinini), esikhundleni se-TiltX kanye Ama-engeli e-TiltY (ama-engeli aphakathi kwendiza esuka ku-stylus kanye neyodwa yezimbazo kanye nendiza esuka kuzimbazo zika-Y kanye no-Y Z). Kungezwe nemisebenzi yokuguqula phakathi kwe-altitude/azimuth kanye ne-TiltX/TiltY.
• Kushintshwe umbhalo wekhodi wesikhala kuma-URL lapho ubala kuzibambi zephrothokholi - indlela ye-navigator.registerProtocolHandler() manje ithatha indawo yezikhala ngo-"%20" esikhundleni sika-"+", ehlanganisa ukuziphatha nezinye iziphequluli ezifana ne-Firefox.
• Kwengezwe i-CSS-pseudo-element "::umaki", okuvumela ukuthi wenze ngokwezifiso umbala, usayizi, ukwakheka kanye nohlobo lwezinombolo namaphoyinti okufakwa kuhlu kumabhulokhi Futhi .
• Kwengezwe usekelo lwesihloko se-HTTP Inqubomgomo Yedokhumenti, ukuvumela buza Imithetho yokufinyelela kumadokhumenti, efana nendlela yokuhlukanisa i-sandbox yama-iframe, kodwa ngaphezulu kwendawo yonke. Isibonelo, ngeNqubomgomo Yedokhumenti ungakhawulela ukusetshenziswa kwezithombe zekhwalithi ephansi, ukhubaze i-JavaScript APIs enensayo, ulungise imithetho yokulayisha ama-iframe, izithombe nemibhalo, ukhawulele usayizi wedokhumenti uwonke kanye nethrafikhi, unqabele izindlela eziholela ekudwetshweni kabusha kwekhasi, khubaza. umsebenzi Skrola uye Embhalweni.
• Ku-elementi ungeze usekelo lwamapharamitha 'e-inline-grid', 'igridi', 'inline-flex' kanye 'ne-flex' asethwe ngesakhiwo se-CSS 'sokubonisa'.
• Indlela eyengeziwe I-ParentNode.replaceChildren() ukubuyisela zonke izingane zenodi yomzali enye inodi ye-DOM. Ngaphambilini, ungasebenzisa inhlanganisela ye-node.removeChild() kanye ne-node.append() noma i-node.innerHTML kanye ne-node.append() ukuze umiselele amanodi.
• Kunwetshiwe ububanzi bezinhlelo ze-URL ezivunyelwe ukuthi zikhishwe kusetshenziswa irejistaProtocolHandler(). Uhlu lwezinhlelo lubandakanya amaphrothokholi ahlukaniselwe i-cabal, i-dat, i- did, i-dweb, i-ethereum, i-hyper, i-ipfs, i-ipns ne-ssb, ekuvumela ukuthi uchaze izixhumanisi zama-elementi ngokunganaki isayithi noma isango elinikeza ukufinyelela kunsiza.
• Ku-API I-Asynchronous Clipboard ukwesekwa okwengeziwe kwefomethi yombhalo/html yokukopisha nokunamathisela i-HTML ngebhodi lokunamathisela (izakhiwo ze-HTML eziyingozi ziyahlanzwa lapho kubhalwa futhi kufundwa ebhodini lokunamathisela). Ushintsho, isibonelo, lukuvumela ukuthi uhlele ukufakwa nokukopishwa kombhalo ofomethiwe ngezithombe nezixhumanisi kubahleli bewebhu.
• Ku-WebRTC kwengezwe ikhono lokuxhuma izibambi zakho zedatha ezibizwa ezigabeni zokufaka ikhodi noma zokuqopha ze-WebRTC MediaStreamTrack. Isibonelo, leli khono lingasetshenziswa ukwengeza usekelo lokubethela ngasemaphethelweni kwedatha edluliswa ngamaseva amaphakathi.
• Enjinini ye-JavaScript V8 ngo-75% usheshisiwe ukuqaliswa kwe-Number.prototype.toString. Kwengezwe impahla yegama elithi .name kumakilasi angavumelaniyo anenani elingenalutho. Indlela ye-Atomics.wake isusiwe, eyake yaqanjwa kabusha ngokuthi i-Atomics.yazisa ukuze ihambisane nokucaciswa kwe-ECMA-262. Ikhodi yekhithi yamathuluzi yokuhlola i-fuzzing ivuliwe I-JS-Fuzzer.
• I-Liftoff baseline compiler ye-WebAssembly, ekhishwe ekukhululweni kokugcina, ihlanganisa ikhono lokusebenzisa imiyalelo ye-vector. I-SIMD ukusheshisa izibalo. Uma sibheka izivivinyo, ukwenza ngcono kwenza kwaba nokwenzeka ukusheshisa ezinye izivivinyo izikhathi ezingu-2.8. Okunye ukulungiselelwa kukwenze kwashesha kakhulu ukubiza imisebenzi ye-JavaScript engenisiwe kusuka ku-WebAssembly.
• Kunwetshiwe amathuluzi onjiniyela bewebhu: Iphaneli Yemidiya yengeze ulwazi mayelana nabadlali abasetshenziswa ukudlala ividiyo ekhasini, okuhlanganisa idatha yomcimbi, amalogi, amanani ezakhiwo, namapharamitha wokuqopha uzimele (isibonelo, unganquma izimbangela zokulahleka kozimele kanye nezinkinga zokusebenzisana. kusuka kuJavaScript).
  

  Kumenyu yokuqukethwe yephaneli ye-Elements, ikhono lokudala izithombe-skrini zento ekhethiwe lingeziwe (isibonelo, ungakha isithombe-skrini sethebula lokuqukethwe noma ithebula).

  

  Kukhonsoli yewebhu, iphaneli yesixwayiso senkinga ithathelwe indawo umlayezo ojwayelekile, futhi izinkinga ezinamakhukhi ezinkampani zangaphandle zifihlwa ngokuzenzakalelayo kuthebhu yezinkinga futhi zinikwe amandla ngebhokisi lokuhlola elikhethekile.

  

  Kuthebhu ethi Ukunikezwa, inkinobho ethi “Khubaza amafonti endawo” yengeziwe, ekuvumela ukuthi ulingise ukungabikho kwamafonti endawo, futhi kuthebhu yezinzwa usungakwazi manje ukulingisa ukungasebenzi komsebenzisi (kuzinhlelo zokusebenza ezisebenzisa i-Idle Detection API).
  

  

  Iphaneli yohlelo lokusebenza ihlinzeka ngolwazi oluningiliziwe mayelana ne-iframe ngayinye, iwindi elivuliwe, nezigelekeqe, okuhlanganisa ulwazi mayelana nokuhlukaniswa kwe-Cross-Origin kusetshenziswa i-COEP ne-COOP.
  

  

• Kuqalisiwe ukushintshwa kokuqaliswa kwephrothokholi I-QUIC kunketho ethuthukiswe ekucacisweni kwe-IETF, esikhundleni senketho ye-Google QUIC.

Ngokungeziwe ezenzweni ezintsha nokulungiswa kweziphazamisi, inguqulo entsha iyaqeda 35 ubuthakathaka. Ubungozi obuningi buhlonzwe njengomphumela wokuhlola okuzenzakalelayo ngamathuluzi IkheliSanitizer, I-MemorySanitizer, Lawula Ubuqotho Bokugeleza, I-LibFuzzer и AFL. Ukuba sengozini okukodwa (i-CVE-2020-15967, ukufinyelela kumemori ekhululiwe ngekhodi yokusebenzelana ne-Google Payments) kumakwa njengokubalulekile, i.e. ikuvumela ukuthi udlule wonke amazinga okuvikela isiphequluli futhi wenze ikhodi kusistimu engaphandle kwendawo ye-sandbox. Njengengxenye yohlelo lokukhokha imiklomelo engukheshi ngokuthola ubungozi ekukhishweni kwamanje, i-Google ikhokhele imiklomelo engu-27 ebiza u-$71500 (umklomelo owodwa ongu-$15000, imiklomelo emithathu ka-$7500, imiklomelo emihlanu ka-$5000, imiklomelo emibili ka-$3000, umklomelo owodwa wama-$200, kanye nemiklomelo emibili engu-$500). Usayizi wemiklomelo eyi-13 awakanqunywa.

Source: opennet.ru