Ukukhishwa kwe-Chrome 98

I-Google yembule ukukhishwa kwesiphequluli sewebhu se-Chrome 98. Ngesikhathi esifanayo, ukukhululwa okuzinzile kwephrojekthi yamahhala ye-Chromium, esebenza njengesisekelo se-Chrome, kuyatholakala. Isiphequluli se-Chrome sihlukaniswa ngokusetshenziswa kwezimpawu ze-Google, ukuba khona kwesistimu yokuthumela izaziso uma kwenzeka ingozi, amamojula okudlala okuqukethwe kwevidiyo okuvikelekile (i-DRM), isistimu yokufaka ngokuzenzakalelayo izibuyekezo, nokudlulisa amapharamitha we-RLZ uma ukucinga. Ukukhishwa okulandelayo kwe-Chrome 99 kuhlelelwe umhla zingama-1 kuNdasa.

Izinguquko ezibalulekile ku-Chrome 98:

• Isiphequluli sinesitolo saso sezitifiketi zezimpande zezitifiketi zeziphathimandla (Chrome Root Store), ezizosetshenziswa esikhundleni sezitolo zangaphandle eziqondene nohlelo lokusebenza ngalunye. Isitolo sisetshenziswa ngendlela efanayo nesitolo esizimele sezitifiketi zempande kuFirefox, esetshenziswa njengesixhumanisi sokuqala ukuhlola uchungechunge lokwethenjwa kwesitifiketi lapho kuvulwa amasayithi nge-HTTPS. Isitoreji esisha asikasetshenziswa ngokuzenzakalela. Ukuze kube lula ukushintshwa kwezilungiselelo zesitoreji sesistimu nokuqinisekisa ukuphatheka, kuzoba nesikhathi soshintsho lapho Isitolo Sezimpande ze-Chrome sizofaka ukukhethwa okugcwele kwezitifiketi ezigunyazwe kuzingxenyekazi eziningi ezisekelwayo.
• Uhlelo lokuqinisa ukuvikeleka ekuhlaselweni okuhlobene nokufinyelela izinsiza kunethiwekhi yendawo noma kukhompuyutha yomsebenzisi (i-localhost) kusukela kumaskripthi alayishwayo lapho isayithi livuliwe liyaqhubeka nokusetshenziswa. Izicelo ezinjalo zisetshenziswa abahlaseli ukwenza ukuhlasela kwe-CSRF kumarutha, izindawo zokufinyelela, amaphrinta, izixhumanisi zewebhu yebhizinisi namanye amadivayisi namasevisi amukela izicelo ezivela kunethiwekhi yendawo kuphela.

  Ukuze uvikele ekuhlaselweni okunjalo, uma noma yiziphi izinsiza ezingaphansi zifinyelelwa kunethiwekhi yangaphakathi, isiphequluli sizoqala ukuthumela isicelo esicacile semvume yokudawuniloda lezo zinsiza ezincane. Isicelo sezimvume senziwa ngokuthumela isicelo se-CORS (I-Cross-Origin Resource Sharing) esinesihloko esithi “Access-Control-Request-Private-Network: true” kuseva yesayithi eyinhloko ngaphambi kokufinyelela kunethiwekhi yangaphakathi noma umsingathi wasendaweni. Lapho iqinisekisa ukusebenza ekuphenduleni lesi sicelo, iseva kufanele ibuyisele isihloko esithi “Ukufinyelela-Ukulawula-Vumela-Inethiwekhi-Yangasese: iqiniso”. Ku-Chrome 98, isheke lisetshenziswa kumodi yokuhlola futhi uma singekho isiqinisekiso, isexwayiso siboniswa kukhonsoli yewebhu, kodwa isicelo sensiza engaphansi ngokwaso asivinjwanga. Ukuvimba akuhlelelwe ukuthi kunikwe amandla kuze kube yilapho i-Chrome 101 ikhishwa.

• Izilungiselelo ze-akhawunti zihlanganisa amathuluzi okuphatha ukufakwa Kokuphequlula Okuphephile Okuthuthukisiwe, okwenza kusebenze ukuhlola okwengeziwe ukuze kuvikelwe ebugebengwini bokweba imininingwane ebucayi, umsebenzi onobungozi nezinye izinsongo kuwebhu. Uma wenza imodi isebenze ku-akhawunti yakho ye-Google, manje uzocelwa ukuthi uvule imodi ku-Chrome.
• Kwengezwe imodeli yokuthola imizamo yobugebengu bokweba imininingwane ebucayi ohlangothini lweklayenti, esetshenziswa kusetshenziswa inkundla yokufunda yomshini we-TFLite (TensorFlow Lite) futhi ayidingi ukuthumela idatha ukuze kwenziwe ukuqinisekiswa ohlangothini lwe-Google (kulokhu, i-telemetry ithunyelwa ngolwazi mayelana nenguqulo yemodeli. nezisindo ezibaliwe zesigaba ngasinye) . Uma kutholwa umzamo wobugebengu bokweba imininingwane ebucayi, umsebenzisi uzoboniswa ikhasi lesixwayiso ngaphambi kokuvula isayithi elisolisayo.
• Ku-API Yamacebiso Eklayenti, eyathuthukiswayo njengokungena esikhundleni sesihloko Somenzeli Womsebenzisi futhi ikuvumela ukuthi ukhethe ngokukhetha idatha mayelana nemingcele ethile yesiphequluli nesistimu (inguqulo, inkundla, njll.) kuphela ngemva kwesicelo seseva, kuba kungenzeka ukufaka esikhundleni samagama aqanjiwe ohlwini lwezihlonzi zesiphequluli, ngokuya ngezifaniso ne-GREASE (Yenza Izandiso Ezingahleliwe Futhi Uqinise Izandiso) esetshenziswa ku-TLS. Ngokwesibonelo, ngaphezu '"Chrome"; v="98″' kanye ne-'"Chromium"; v="98″' isihlonzi esingahleliwe sesiphequluli esingekho '(Cha; Isiphequluli"; v="12″' singangezwa ohlwini. Ukushintsha okunjalo kuzosiza ekuboneni izinkinga ngokucubungula izihlonzi zeziphequluli ezingaziwa, okuholela eqinisweni lokuthi ezinye iziphequluli ziphoqeleka ukuba zizenze ezinye iziphequluli ezidumile ukuze zidlule ukuhlola ngokumelene nohlu lweziphequluli ezamukelekayo.
• Kusukela ngo-January 17, Isitolo Sewebhu Se-Chrome asisazamukeli izengezo ezisebenzisa inguqulo 2023 ye-Chrome manifest. Ukwengezwa okusha manje kuzokwamukelwa kuphela ngenguqulo yesithathu ye-manifest. Onjiniyela bezengezo ezingezwe ngaphambilini basazokwazi ukushicilela izibuyekezo ngenguqulo yesibili ye-manifest. Ukuhoxiswa okuphelele kwenguqulo yesibili ye-manifesto kuhlelelwe uJanuwari XNUMX.
• Usekelo olungeziwe lwamafonti evekhtha yombala ngefomethi ye-COLRv1 (isethi engaphansi yamafonti e-OpenType aqukethe, ngaphezu kwama-vector glyphs, isendlalelo esinolwazi olunemibala), engasetshenziswa, isibonelo, ukwakha i-emoji ye-multicolor. Ngokungafani nefomethi ye-COLRv0 esekelwe ngaphambilini, i-COLRv1 manje inekhono lokusebenzisa amagradient, ukumbondela, nokuguqulwa. Ifomethi futhi ihlinzeka ngefomu lokugcina elihlangene, inikeza ukuminyanisa okuphumelelayo, futhi ivumela ukusetshenziswa kabusha kohlaka, okuvumela ukuncishiswa okukhulu kosayizi wefonti. Isibonelo, ifonti ye-Noto Color Emoji ithatha u-9MB ngefomethi ye-raster, kanye no-1MB kufomethi yevekhtha ye-COLRv1.85.
• Imodi Yezilingo Zomsuka (izici zokuhlola ezidinga ukwenziwa kusebenze okuhlukile) isebenzisa i-Regional Capture API, ekuvumela ukuthi unqampune ividiyo ethwebuliwe. Isibonelo, ukunqampuna kungase kudingeke ezinhlelweni zewebhu ezithwebula ividiyo ngokuqukethwe kwethebhu yazo, ukusika okuqukethwe okuthile ngaphambi kokuthumela. I-Origin Trial isho amandla okusebenza ne-API eshiwo ezinhlelweni ezilandwe ku-localhost noma 127.0.0.1, noma ngemva kokubhalisa nokwamukela ithokheni elikhethekile elisebenza isikhathi esilinganiselwe sesayithi elithile.
• Isici se-CSS esithi "contain-intrinsic-size" manje sisekela inani elithi "auto", esizosebenzisa usayizi wokugcina we-elementi ekhunjulwayo (uma isetshenziswa "nokubonakala kokuqukethwe: okuzenzakalelayo", umthuthukisi akudingeki aqagele usayizi onikeziwe wesici) .
• Kwengezwe impahla ye-AudioContext.outputLatency, ongathola ngayo ulwazi mayelana nokulibaziseka okubikezelwe ngaphambi kokuphuma komsindo (ukubambezeleka phakathi kwesicelo somsindo nokuqala kokucubungula idatha eyamukelwe ngedivayisi yokukhipha umsindo).
• Uhlelo lombala wesakhiwo se-CSS, elenza kube nokwenzeka ukunquma ukuthi yiziphi izikimu zombala into engaboniswa kahle (“ukukhanya”, “mnyama”, “imodi yosuku” kanye “nemodi yasebusuku”), ipharamitha “kuphela” yengeziwe. ukuvimbela ama-schema okushintsha umbala okuphoqelekile wezakhi ze-HTML ngazinye. Isibonelo, uma ucacisa okuthi “div { color-scheme: only light }”, kuzobese kuthi itimu elula kuphela izosetshenziselwa isici se-div, nanoma isiphequluli siphoqa ukuthi itimu emnyama ivulwe.
• Kwengezwe usekelo lwemibuzo yemidiya 'ye-dynamic-range' kanye 'nevidiyo-dynamic-range' ku-CSS ukuze kutholwe ukuthi isikrini siyayisekela yini i-HDR (High Dynamic Range).
• Kwengezwe ikhono lokukhetha ukuthi uzovula yini isixhumanisi kuthebhu entsha, iwindi elisha, noma ifasitela le-pop-up kumsebenzi we-window.open(). Ukwengeza, isici se-window.statusbar.visible manje sibuyisela "amanga" kuma-popup kanye "neqiniso" kumathebhu namawindi. const popup = window.open('_blank',",'popup=1′); // Vula kuthebhu ye-popup yewindi le-const = iwindi.vula('_blank',,"'popup=0′); // Vula kuthebhu
• Indlela ye-structuredClone() isetshenziswe kumafasitela nabasebenzi, okukuvumela ukuthi udale amakhophi aphindaphindayo ezinto ezingafaki izakhiwo zento eshiwo kuphela, kodwa nazo zonke ezinye izinto ezibalulwe into yamanje.
• I-Web Authentication API yengeze usekelo lwesandiso sokucaciswa kwe-FIDO CTAP2, esikuvumela ukuthi usethe usayizi omncane ovunyelwe wekhodi ye-PIN (minPinLength).
• Kuzinhlelo zokusebenza zewebhu ezifakiwe ezizimele zodwa, ingxenye ye-Window Controls Overlay ingeziwe, enweba indawo yesikrini yohlelo lokusebenza kulo lonke iwindi, okuhlanganisa nendawo yesihloko, lapho izinkinobho zokulawula iwindi ezijwayelekile (vala, nciphisa, khulisa). ) zibekwe phezulu. Uhlelo lokusebenza Lwewebhu lungalawula ukunikezwa nokucutshungulwa kokufaka kwalo lonke iwindi, ngaphandle kwebhulokhi embondelane enezinkinobho zokulawula iwindi.
• Kwengezwe isici sokuphatha isignali ku-WritableStreamDefaultController ebuyisela into ye-AbortSignal, engasetshenziswa ukumisa ngokushesha ukubhala ku-WritableStream ngaphandle kokulinda ukuthi kuqedelwe.
• I-WebRTC isuse usekelo lwendlela yesivumelwano esibalulekile se-SDES, esahoxiswa yi-IETF ngo-2013 ngenxa yezinkinga zokuphepha.
• Ngokuzenzakalelayo, i-U2F (Cryptotoken) API ivaliwe, eyehliswa ngaphambilini futhi yathathelwa indawo i-Web Authentication API. I-U2F API izosuswa ngokuphelele ku-Chrome 104.
• Kuhla Lwemibhalo Lwe-API, inkambu yenguqulo_yesiphequluli yehlisiwe, esikhundleni sayo yinkambu entsha ye-pending_browser_version, ehluka ngokuthi iqukethe ulwazi mayelana nenguqulo yesiphequluli, kucatshangelwa izibuyekezo ezilandiwe kodwa ezingasetshenzisiwe (okungukuthi, inguqulo ezosebenza ngemva isiphequluli siqalisiwe kabusha).
• Izinketho ezisusiwe ezivumele ukubuyisela usekelo lwe-TLS 1.0 ne-1.1.
• Ukuthuthukiswa kwenziwe kumathuluzi onjiniyela bewebhu. Ithebhu yengeziwe ukuhlola ukusebenza kwenqolobane Yokudlulela phambili, ehlinzeka ngokuzulazula ngokushesha lapho usebenzisa izinkinobho Emuva kanye Nangaphambili. Kwengezwe ikhono lokulingisa imibuzo yemidiya yemibala ephoqelelwe. Kwengezwe izinkinobho kumhleli we-Flexbox ukuze kusekelwe izici zokuhlehlisa irowu kanye nekholomu. Ithebhu ethi "Izinguquko" iqinisekisa ukuthi izinguquko ziyaboniswa ngemva kokufometha ikhodi, okwenza kube lula ukuhlukaniswa kwamakhasi amancane.

  Ukuqaliswa kwephaneli yokubuyekezwa kwekhodi kubuyekezwe ekukhishweni komhleli wekhodi ye-CodeMirror 6, okuthuthukisa kakhulu ukusebenza kokusebenza ngamafayela amakhulu kakhulu (i-WASM, i-JavaScript), ixazulula izinkinga ngokususwa okungahleliwe ngesikhathi sokuzulazula, futhi ithuthukise izincomo isistimu yokuqedela ngokuzenzakalela lapho uhlela ikhodi. Ikhono lokuhlunga okukhiphayo ngegama lesakhiwo noma inani lengezwe kuphaneli yezakhiwo ze-CSS.

  

Ngokungeziwe ezenzweni ezintsha nokulungiswa kweziphazamisi, inguqulo entsha isusa ubungozi obungu-27. Ubungozi obuningi buhlonzwe njengomphumela wokuhlolwa okuzenzakalelayo kusetshenziswa i-AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer kanye namathuluzi e-AFL. Azikho izinkinga ezibucayi ezitholiwe ezingavumela umuntu ukuthi adlule wonke amazinga okuvikela isiphequluli futhi akhiphe ikhodi kusistimu engaphandle kwendawo ye-sandbox. Njengengxenye yohlelo lokuklomelisa ngemali yokuthola ubungozi ekukhishweni kwamanje, i-Google ikhokhele imiklomelo engu-19 ebiza u-$88 20000 (imiklomelo emibili engu-$12000, umklomelo owodwa ka-$7500, imiklomelo emibili engu-$1000, imiklomelo emine engu-$7000 kanye no-$5000 ngamunye, u-$3000, no-$2000.

Source: opennet.ru