Ukukhishwa kwe-Chrome 91

I-Google iveze ukukhishwa kwesiphequluli sewebhu se-Chrome 91. Ngesikhathi esifanayo, ukukhululwa okuzinzile kwephrojekthi yamahhala ye-Chromium, esebenza njengesisekelo se-Chrome, kuyatholakala. Isiphequluli se-Chrome sihlukaniswa ngokusetshenziswa kwezimpawu ze-Google, ukuba khona kwesistimu yokuthumela izaziso uma kwenzeka ingozi, amamojula okudlala okuqukethwe kwevidiyo evikelwe (DRM), isistimu yokufaka ngokuzenzakalelayo izibuyekezo, nokudlulisa amapharamitha e-RLZ lapho usesha. Ukukhishwa okulandelayo kwe-Chrome 92 kuhlelelwe uJulayi 20.

Izinguquko ezibalulekile ku-Chrome 91:

• Kusetshenziswe ikhono lokumisa ukusetshenziswa kwe-JavaScript eqenjini lethebhu eligoqiwe. I-Chrome 85 yethule usekelo lokuhlela amathebhu abe ngamaqembu angahlotshaniswa nombala othile kanye nelebula. Uma uchofoza kulebula yeqembu, amathebhu ahlotshaniswa nalo ayagoqwa futhi esikhundleni salokho kusale ilebula eyodwa (ukuchofoza ilebula futhi kuvula iqembu). Ekukhishweni okusha, ukuze kwehliswe umthwalo we-CPU futhi wonge amandla, umsebenzi kumathebhu ancishisiwe umisiwe. Okuhlukile kwenzelwa kuphela amathebhu adlala umsindo, sebenzisa i-Web Locks noma i-IndexedDB API, xhuma kudivayisi ye-USB, noma thwebula ividiyo, umsindo, noma okuqukethwe kwewindi. Ushintsho luzokhishwa kancane kancane, kuqala ngephesenti elincane labasebenzisi.
• Kufakwe usekelo lwendlela yesivumelwano eyisihluthulelo ekwazi ukumelana namandla okuhlukumeza kumakhompyutha e-quantum. Amakhompiyutha e-Quantum ashesha kakhulu ekuxazululeni inkinga yokubola inombolo engokwemvelo ibe yizici eziyinhloko, okungaphansi kwe-algorithms yesimanje yokubethela i-asymmetric futhi ayikwazi ukuxazululwa ngempumelelo kumaphrosesa akudala. Ukuze isetshenziswe ku-TLSv1.3, i-plugin ye-CECPQ2 (I-Combined Elliptic-Curve kanye ne-Post-Quantum 2) inikeziwe, kuhlanganiswe indlela yokushintshisana ebalulekile ye-X25519 nohlelo lwe-HRSS olusekelwe ku-algorithm ye-NTRU Prime, eklanyelwe ama-cryptosystems angemuva kwe-quantum.
• Ukusekela izimiso ze-TLS 1.0 kanye ne-TLS 1.1, eziye zaphelelwa yisikhathi yikomiti le-IETF (Internet Engineering Task Force), kuyekwe ngokuphelele. Kubandakanya ithuba lokubuyisela i-TLS 1.0/1.1 ngokushintsha inqubomgomo ye-SSLVersionMin kususiwe.
• Imihlangano yesikhulumi se-Linux ihlanganisa ukusetshenziswa kwemodi ethi “DNS phezu kwe-HTTPS” (DoH, DNS phezu kwe-HTTPS), eyayilethwe ngaphambilini kubasebenzisi beWindows, macOS, ChromeOS kanye ne-Android. I-DNS-over-HTTPS izosebenza ngokuzenzakalela kubasebenzisi labo izilungiselelo zabo ezicacisa abahlinzeki be-DNS abasekela lobu buchwepheshe (ku-DNS-over-HTTPS umhlinzeki ofanayo osetshenziswa njenge-DNS). Isibonelo, uma umsebenzisi ene-DNS 8.8.8.8 ecaciswe kuzilungiselelo zesistimu, isevisi ye-Google ye-DNS-over-HTTPS (“https://dns.google.com/dns-query”) izokwenziwa isebenze ku-Chrome uma i-DNS ithi 1.1.1.1 , bese kuba isevisi ye-DNS-over-HTTPS Cloudflare (“https://cloudflare-dns.com/dns-query”), njll.
• I-Port 10080, esetshenziswa ekwenzeni ikhophi yasenqolobaneni ka-Amanda kanye ne-VMWare vCenter, yengezwe ohlwini lwamachweba wenethiwekhi angavunyelwe. Ngaphambilini, izimbobo ezingu-69, 137, 161, 554, 1719, 1720, 1723, 5060, 5061 kanye ne-6566 zase zivaliwe. Ezimbobeni ezisohlwini oluvinjelwe, ukuthumela izicelo ze-HTTP, HTTPS ne-FTP kuvinjiwe ukuze kuvikelwe isiliphu sokuhlasela esihlaselayo se-NAT. , okuvumela uma kuvulwa ikhasi lewebhu elilungiswe ngokukhethekile umhlaseli esipheqululini ukuze kusungulwe uxhumano lwenethiwekhi kusuka kuseva yomhlaseli kuya kunoma iyiphi imbobo ye-UDP noma ye-TCP ohlelweni lomsebenzisi, naphezu kokusetshenziswa kwebanga langaphakathi lamakheli (192.168.xx, 10) .xxx).
• Kungenzeka ukuthi ulungiselele ukwethulwa okuzenzakalelayo kwezinhlelo zokusebenza zewebhu ezizimele (i-PWA - Izinhlelo Zewebhu Eziqhubekayo) lapho umsebenzisi engena ohlelweni (iWindows ne-macOS). I-Autorun imisiwe ekhasini le-chrome://apps. Ukusebenza okwamanje kuhlolwa kumaphesenti amancane abasebenzisi, futhi kubo bonke abanye kudinga ukusebenzisa isilungiselelo se-“chrome://flags/#enable-desktop-pwas-run-on-os-login”.
• Njengengxenye yomsebenzi wokuhambisa isiphequluli ukuze sisebenzise amagama asetshenziswayo, ifayela elithi "master_preferences" liqanjwe kabusha laba "okuncamelayo_kokuqala". Ukuze ugcine ukuhambisana, usekelo lwe-"master_preferences" luzohlala kusiphequluli isikhathi esithile. Ngaphambilini, isiphequluli besesivele sikuyekile ukusetshenziswa kwamagama “uhlu olumhlophe”, “uhlu olumnyama” kanye “nomdabu”.
• Imodi Yokuphequlula Okuphephile Ethuthukisiwe, eyenza kusebenze ukuhlola okwengeziwe ukuze kuvikelwe ebugebengwini bokweba imininingwane ebucayi, imisebenzi enonya nezinye izinsongo kuwebhu, ihlanganisa ikhono lokuthumela amafayela alandiwe ukuze askenwe ngasohlangothini lwe-Google. Ngaphezu kwalokho, Ukuphequlula Okuphephile Okuthuthukisiwe kusebenzisa ukubala kwamathokheni aboshwe ku-akhawunti ye-Google lapho kuhlonzwa imizamo yobugebengu bokweba imininingwane ebucayi, kanye nokuthumela amanani esihloko se-Referrer kumaseva e-Google ukuze ahlole ukudluliselwa kusuka kusayithi eliyingozi.
• Ohlelweni lweplathifomu ye-Android, idizayini yezinto zefomu lewebhu ithuthukisiwe, ethuthukisiwe ukuze isetshenziswe ezikrinini zokuthinta namasistimu abantu abakhubazekile (kumasistimu edeskithophu, umklamo wenziwe kabusha ku-Chrome 83). Inhloso yokwakhiwa kabusha kwakuwukuhlanganisa ukuklama kwezakhi zefomu nokuqeda ukungahambisani kwesitayela - ngaphambili, ezinye izakhi zefomu zaklanywa ngokuhambisana nezakhi zesistimu yokusebenza, kanti ezinye ngokuhambisana nezitayela ezithandwa kakhulu. Ngenxa yalokhu, izakhi ezihlukene bezifaneleke ngendlela ehlukile kuzikrini zokuthinta namasistimu abantu abakhubazekile.
• Kwengezwe inhlolovo yombono yomsebenzisi eboniswa lapho kuvulwa izilungiselelo ze-Privacy Sandbox (chrome://settings/privacySandbox).
• Uma usebenzisa inguqulo ye-Android ye-Chrome kuma-PC ethebhulethi anezikrini ezinkulu, isicelo senzelwe inguqulo yedeskithophu yesayithi, hhayi i-edishini yamadivayisi eselula. Ungakwazi ukushintsha ukuziphatha usebenzisa isilungiselelo se-“chrome://flags/#request-desktop-site-for-tablets”.
• Ikhodi yokunikeza amathebula yenziwe kabusha, okusivumele ukuba sixazulule izinkinga zokungahambisani nokuziphatha lapho sibonisa amathebula ku-Chrome nakuFirefox/Safari.
• Ukucutshungulwa kwezitifiketi zeseva kusukela kwabasemagunyeni bezitifiketi zase-Spain i-Camerfirma kumisiwe ngenxa yezehlakalo eziphindelelayo kusukela ngo-2017 ezibandakanya ukwephulwa kokukhishwa kwezitifiketi. Usekelo lwezitifiketi zeklayenti luyagcinwa; ukuvinjwa kusebenza kuphela kuzitifiketi ezisetshenziswa kumasayithi e-HTTPS.
• Siyaqhubeka nokusebenzisa ukwesekwa kokuhlukaniswa kwenethiwekhi ukuze sivikele ezindleleni zokulandelela ukunyakaza kwabasebenzisi phakathi kwamasayithi asekelwe ekulondolozeni izihlonzi ezindaweni ezingahloselwe ukugcinwa unomphela kolwazi (“Ama-Supercookies”). Ngenxa yokuthi izinsiza ezifakwe kunqolobane zigcinwa endaweni yamagama evamile, kungakhathaliseki ukuthi isizinda sini, isayithi elilodwa linganquma ukuthi enye isayithi ilayisha izinsiza ngokuhlola ukuthi leyo nsiza ikunqolobane yini. Ukuvikelwa kusekelwe ekusetshenzisweni kwesegmentation yenethiwekhi (I-Network Partitioning), ingqikithi yakho okuwukwengeza kuma-caches okwabelwana ukubophezela okwengeziwe kwamarekhodi esizindeni lapho kuvulwa ikhasi eliyinhloko, elikhawulela ukumbozwa kwenqolobane yemibhalo yokulandelela ukunyakaza kuphela. kusayithi lamanje (iskripthi esivela ku-iframe ngeke sikwazi ukuhlola ukuthi insiza ilandwe kwenye isayithi).

  Intengo yokuhlukaniswa iwukwehla ekusebenzeni kahle kwe-caching, okuholela ekwenyukeni okuncane kwesikhathi sokulayisha ikhasi (esiphezulu ngo-1.32%, kodwa ku-80% wamasayithi ngo-0.09-0.75%). Ukuze uhlole imodi yokuhlukanisa, ungasebenzisa isiphequluli ngenketho “—enable-features=PartitionConnectionsByNetworkIsolationKey, PartitionExpectCTStateByNetworkIsolationKey, PartitionHttpServerPropertiesByNetworkIsolationKey, PartitionNelAndReportingByLSKessionIsolationIsolations I-CacheB yNetworkIsolationKey".

• Kwengezwe yangaphandle ye-REST API VersionHistory (https://versionhistory.googleapis.com/v1/chrome), ongathola ngayo ulwazi mayelana nezinguqulo ze-Chrome ngokuhlobene nezinkundla namagatsha, kanye nomlando wokubuyekeza isiphequluli.
• Kuma-iframe alayishwe kusuka ezizindeni ngaphandle kwesizinda sekhasi lesisekelo, ukuboniswa kwe-JavaScript dialog alert(), confirm() kanye ne-prompt() akuvunyelwe, okuzovikela abasebenzisi emizamweni yeskripthi yenkampani yangaphandle yokubonisa imilayezo ngaphansi cabanga ukuthi isaziso siboniswe isayithi elikhulu.
• I-WebAssembly SIMD API isizinzisiwe futhi yanikezwa ngokuzenzakalelayo ukuze kusetshenziswe imiyalelo ye-vector ye-SIMD ezinhlelweni ezifomethwe yi-WebAssembly. Ukuqinisekisa ukuzimela kwenkundla, inikeza uhlobo olusha lwe-128-bit olungamela izinhlobo ezahlukene zedatha egcwele, kanye nemisebenzi eminingana eyisisekelo ye-vector yokucubungula idatha egcwele. I-SIMD ikuvumela ukuthi ukhuphule ukukhiqiza ngokufanisa ukucutshungulwa kwedatha futhi izoba usizo lapho uhlanganisa ikhodi yomdabu ku-WebAssembly.
• Ama-API amaningana amasha engeziwe kumodi ye-Origin Trials (izici zokuhlola ezidinga ukwenziwa kusebenze okuhlukile). I-Origin Trial isho amandla okusebenza ne-API eshiwo ezinhlelweni ezilandwe ku-localhost noma 127.0.0.1, noma ngemva kokubhalisa nokwamukela ithokheni elikhethekile elisebenza isikhathi esilinganiselwe sesayithi elithile.
  • I-WebTransport iyiphrothokholi futhi ehambisana ne-JavaScript API yokuthumela nokwamukela idatha phakathi kwesiphequluli neseva. Isiteshi sokuxhumana sihlelwa phezulu kwe-HTTP/3 sisebenzisa iphrothokholi ye-QUIC njengento yokuthutha, yona, isengezo kuphrothokholi ye-UDP esekela ukuphindaphinda kokuxhumana okuningi futhi inikeza izindlela zokubethela ezilingana ne-TLS/SSL.

    I-WebTransport ingasetshenziswa esikhundleni se-WebSockets kanye nezindlela ze-RTCDataChannel, enikeza izici ezengeziwe ezifana nokusakazwa kokusakaza okuningi, ukusakazwa okukodwa, ukulethwa ngaphandle kwe-oda, izindlela zokulethwa ezithembekile nezingathembeki. Ngaphezu kwalokho, i-WebTransport ingasetshenziswa esikhundleni se-Server Push mechanism, i-Google eyilahlile ku-Chrome.

  • Isixhumi esibonakalayo esichazayo sokuchaza izixhumanisi zezinhlelo zokusebenza zewebhu ezizimele (ama-PWAs), ezinikwe amandla kusetshenziswa ipharamitha ye-capture_links ku-manifest yohlelo lokusebenza lwewebhu futhi okuvumela amasayithi ukuthi avule ngokuzenzakalelayo iwindi elisha le-PWA lapho isixhumanisi sohlelo luchofozwa noma sishintshela kumodi yewindi elilodwa, efana nezinhlelo zokusebenza zeselula.
  • Kwengezwe i-WebXR Plane Detection API, ehlinzeka ngolwazi mayelana nezindawo ezihleliwe endaweni ebonakalayo ye-3D. I-API eshiwo ikwenza kube nokwenzeka ukugwema ukucutshungulwa okugxilisa kakhulu kwensiza idatha etholwe ngekholi MediaDevices.getUserMedia(), kusetshenziswa ukusetshenziswa okuphathelene nama-algorithms okubona kwekhompyutha. Ake sikukhumbuze ukuthi i-WebXR API ikuvumela ukuthi uhlanganise umsebenzi ngezigaba ezahlukahlukene zamadivayisi ento engekho ngokoqobo, kusukela kuzigqoko ezimile ze-3D kuya kuzixazululo ezisekelwe kumadivayisi eselula.
• Ukusekelwa kokusebenza nama-WebSockets phezu kwe-HTTP/2 (RFC 8441) sekwenziwe, okuvumeleke kuphela ezicelweni ezivikelekile kuma-WebSockets naphambi koxhumano oseluvele lusunguliwe lwe-HTTP/2 neseva, ememezele ukwesekwa kwe-“WebSockets over. HTTP/2” isandiso.
• Imikhawulo yokunemba kwamanani esibali sikhathi akhiqizwe ucingo oluya ku-performance.now() iyahambisana kuzo zonke izinkundla ezisekelwayo futhi ivumela amandla okuhlukanisa izibambi ezinqubweni ezihlukene. Isibonelo, ezinhlelweni zedeskithophu, ukunemba lapho kusetshenzwa kuzimo ezingahlukanisiwe kuncishisiwe kusuka kuma-microsecond angu-5 kuya kwangu-100.
• Ukwakhiwa kwedeskithophu manje kuhlanganisa ikhono lokufunda amafayela ebhodini lokunamathisela (ukubhala amafayela ebhodini lokunamathisela kusanqatshelwe). umsebenzi we-async onNamathisela(e) {vumela ifayela = e.clipboardData.files[0]; let contents = wait file.text(); }
• I-CSS isebenzisa umthetho we-@counter-style, okuvumela ukuthi uchaze isitayela sakho sezinto zokubala namalebula ezinhlwini ezinezinombolo.
• Amakilasi mbumbulu we-CSS “:host()” kanye “:host-context()” angeze amandla okudlulisa amanani awodwa ezikhethi ezihlanganisiwe ( ) ngaphezu kohlu lwabakhethi ( ).
• Kungezwe isixhumi esibonakalayo se-GravitySensor sokunquma idatha ye-volumetric (ama-ax amathathu adidiyelwe) kusuka kunzwa yamandla adonsela phansi.
• I-File System Access API inikeza ikhono lokuchaza izincomo zokukhetha igama lefayela nohla lwemibhalo olunikezwa engxoxweni yokudala noma yokuvula ifayela.
• Ama-Iframe alayishwe kwezinye izizinda avunyelwe ukufinyelela i-WebOTP API uma umsebenzisi enikeza izimvume ezifanele. I-WebOTP ikuvumela ukuthi ufunde amakhodi okuqinisekisa esikhathi esisodwa athunyelwe nge-SMS.
• Ivunyelwe ukwabelana ngokufinyelela kumininingwane yamasayithi axhunywe kusetshenziswa indlela ye-DAL (Digital Asset Links), evumela izinhlelo zokusebenza ze-Android ukuthi zihlotshaniswe namasayithi ukwenza ukungena ngemvume kube lula.
• Izisebenzi zesevisi zivumela ukusetshenziswa kwamamojula we-JavaScript. Uma ucacisa uhlobo 'lwemojula' lapho ushayela umakhi, imibhalo eshiwo izolayishwa ngendlela yamamojula futhi itholakalele ukungenisa emongweni wesisebenzi. Ukwesekwa kwemojuli kwenza kube lula ukwabelana ngekhodi kuwo wonke amakhasi ewebhu nakubasebenzi besevisi.
• I-JavaScript inikeza ikhono lokuhlola ubukhona bezinkambu eziyimfihlo entweni kusetshenziswa i-syntax ethi "#foo in obj". isigaba A {ukuhlolwa okumile(obj) {console.log(#foo in obj); } #foo = 0; } Ukuhlolwa (okusha A()); // I-A.test yeqiniso({}); // amanga
• I-JavaScript ngokuzenzakalelayo ivumela ukusetshenziswa kwegama elingukhiye lokulinda kumamojula asezingeni eliphezulu, okuvumela amakholi asynchronous ukuthi ahlanganiswe ngokushelela enqubweni yokulayisha imojula futhi agweme ukuwagoqa "kumsebenzi we-async". Isibonelo, esikhundleni sokuthi (i-async function() {wait Promise.resolve(console.log('test')); }()); manje ungabhala ukuthi wait Promise.resolve(console.log('test'));
• Injini ye-V8 JavaScript ithuthukise ukusebenza kahle kokugcinwa kwesikhashana kwezifanekiso, okukhuphule isivinini sokudlula ukuhlolwa kwe-Speedometer4.5-FlightJS ngo-2%.
• Ingxenye enkulu yentuthuko yenziwe kumathuluzi onjiniyela bewebhu. Imodi yomhloli weMemori entsha yengeziwe, ihlinzeka ngamathuluzi okuhlola idatha ye-ArrayBuffer nememori ye-Wasm.

  Isikhombi sokusebenza esifingqiwe sengeziwe kuphaneli Yokusebenza, okukuvumela ukuthi wahlulele ukuthi isayithi lidinga ukuthuthukiswa noma cha.

  

  Ukubuka kuqala kwesithombe kuphaneli Yezinto kanye nephaneli Yokuhlaziya Inethiwekhi kunikeza ulwazi mayelana nokubukeka kwesilinganiselo sesithombe, izinketho zokunikeza, nosayizi wefayela.

  

  Kuphaneli yokuhlola inethiwekhi, manje sekungenzeka ukuthi uguqule amanani amukelekile wesihloko Sombhalo-Kukhodi Wokuqukethwe.

  

  Kuphaneli yesitayela, manje usungakwazi ukubuka ngokushesha inani elibaliwe lapho uzulazula kumapharamitha e-CSS ngokukhetha okuthi “Buka inani elibaliwe” kumenyu yokuqukethwe.

  

Ngokungeziwe ezenzweni ezintsha nokulungiswa kweziphazamisi, inguqulo entsha isusa ubungozi obungu-32. Ubungozi obuningi buhlonzwe njengomphumela wokuhlolwa okuzenzakalelayo kusetshenziswa i-AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer kanye namathuluzi e-AFL. Azikho izinkinga ezibucayi ezitholiwe ezingavumela umuntu ukuthi adlule wonke amazinga okuvikela isiphequluli futhi akhiphe ikhodi kusistimu engaphandle kwendawo ye-sandbox. Njengengxenye yohlelo lokukhokha imiklomelo yemali ngokuthola ubungozi ekukhishweni kwamanje, i-Google ikhokhele imiklomelo engu-21 ebiza u-$92000 (umklomelo owodwa ongu-$20000, umklomelo owodwa ka-$15000, imiklomelo emine engu-$7500, imiklomelo emithathu engu-$5000, imiklomelo emithathu engu-$3000, imiklomelo emibili engu-$1000 $500). Usayizi wemiklomelo emi-5 awukakanqunywa.

Source: opennet.ru