Ukukhishwa kweFirefox 72

Isiphequluli sewebhu sikhululiwe I-Firefox 72Futhi inguqulo yeselula IFirefox 68.4 yesikhulumi se-Android. Ngaphezu kwalokho, isibuyekezo senziwe amagatsha ukwesekwa kwesikhathi eside 68.4.0. Uyeza maduze esiteji ukuhlolwa kwe-beta igatsha leFirefox 73 lizohamba, ukukhululwa kwalo kuhlelelwe uFebhuwari 11 (iphrojekthi ethuthile amaviki angu-4 umjikelezo wokuthuthukisa).

main emisha:

  • Kumodi yokuvinjwa ejwayelekile yokuqukethwe okungalungile ifakiwe ukuvikeleka ekulandeleleni umsebenzisi kusetshenziswa izindlela zokuhlonza ezifihliwe ("izigxivizo zeminwe zesiphequluli"), okwenziwa yi izigaba ezengeziwe ohlwini lwe-Disconnect.me, oluhlanganisa abasingathi abatholakala besebenzisa imibhalo ukuze bahlonze okufihliwe. Ukuhlonza okufihliwe kubhekisela ekugcinweni kwezihlonzi ezindaweni ezingahloselwe ukugcinwa unomphela kolwazi (“Amakhukhisi amakhulu”), kanye nokukhiqizwa kwezihlonzi ngokusekelwe kudatha engaqondile, njenge ukulungiswa kwesikrini, uhlu lwezinhlobo ezisekelwayo ze-MIME, imingcele ethile kumaheda (I-HTTP / 2 и I-HTTPS), ukuhlaziya okufakiwe ama-plugins namafonti, ukutholakala kwama-Web API athile, aqondene namakhadi evidiyo izici ukuhlinzeka kusetshenziswa i-WebGL neCanvas, ukukhwabanisa nge-CSS, ukuhlaziya izici zokusebenza nazo igundane и ikhibhodi.
    Ukukhishwa kweFirefox 72

  • Yenziwe yasebenza izindlela ukulwa ngezicelo ezicasulayo zokunikeza isayithi izimvume ezengeziwe (Notification.requestPermission(), PushManager.subscribe() kanye neMediaDevices.getDisplayMedia()). Izicelo zokuqinisekisa ukugunyazwa ngeke zisaphazamisa ukusebenza nesiphequluli, kodwa zizoholela kuphela ekubonisweni kwenkomba kubha yekheli ngemva kokusebenzelana komsebenzisi nekhasi (ukuchofoza igundane noma ukucindezela ukhiye) sekurekhodiwe. Amasayithi amaningi ahlukumeza ikhono lesiphequluli lokucela izimvume, ikakhulukazi ngokucela izaziso ngezikhathi ezithile. Ukuhlaziywa kwe-Telemetry kubonise ukuthi ama-97% ezicelo ezinjalo anqatshiwe, okuhlanganisa nezimo ezingu-19% umsebenzisi avale ngokushesha ikhasi ngaphandle kokuchofoza inkinobho yokuvuma noma yenqaba.
  • Kwengeziwe okokuhlola ukwesekwa Iphrothokholi ye-HTTP/3 (ukuze wenze kusebenze ku-:config udinga ukusetha inketho ethi “network.http.http3.enabled”). Ukusekelwa kwe-HTTP/3 kuFirefox kusekelwe neqo, ebhalwe ngolimi lwe-Rust, isebenzisa iklayenti neseva yephrothokholi ye-QUIC (HTTP/3 kulinganisa usebenzisa iphrothokholi ye-QUIC njengesithuthi se-HTTP/2).
  • Ngokuhambisana nezidingo zomthetho osuqalile ukusebenza CCPA (I-California Consumer Privacy Act) kwengezwe ikhono lokususa idatha ye-telemetry kumaseva e-Mozilla. Idatha iyasuswa uma wenqaba ukuqoqa i-telemetry esigabeni esithi “mayelana:okuncanyelwayo#ubumfihlo” (isigaba esithi “Ukuqoqwa Nokusetshenziswa Kwedatha yeFirefox”). Uma usula ibhokisi elithi "Vumela iFirefox ukuthi ithumele idatha yobuchwepheshe neyokusebenzelana ku-Mozilla" elawula ukuthunyelwa kwe-telemetry, i-Mozilla uyazibophezela phakathi kwezinsuku ezingu-30 susa yonke idatha eqoqwe ngesikhathi esiholela ekuhlulekeni kokudluliselwa kwe-telemetry. Idatha egcina itholakala eziphakelini ze-Mozilla phakathi nenqubo yokuqoqa i-telemetry ihlanganisa ulwazi mayelana nokusebenza kweFirefox, ukuvikeleka, kanye nemingcele evamile njengenani lamathebhu avuliwe nobude besikhathi seseshini (ulwazi olumayelana namasayithi avuliwe kanye nemibuzo yosesho ayithunyelwa). Imininingwane egcwele yedatha eqoqiwe ingabukwa ekhasini elithi “mayelana:i-telemetry”.
    Ukukhishwa kweFirefox 72

  • Ku-Linux ne-macOS, ikhono lokubuka ividiyo ngemodi Yesithombe-Esithombeni lengeziwe, okukuvumela ukuthi ukhiphe ividiyo ngendlela yewindi elintantayo elihlala libonakala ngenkathi uzulazula esipheqululini. Ukuze ubuke ngale modi, udinga ukuchofoza ithiphu yamathuluzi noma kumenyu yokuqukethwe evezwa lapho uchofoza kwesokudla kuvidiyo, khetha “Isithombe esisesithombeni” (ku-YouTube, esingena esikhundleni somphathi wayo wemenyu yokuqukethwe, kufanele kwesokudla- chofoza kabili noma chofoza inkinobho ethi Shift icindezelwe).

    Ukukhishwa kweFirefox 72

  • Uma ibha yokuskrola ibonakala abathintekayo umbala wangemuva wekhasi lamanje.
  • Kususiwe ithuba ukubophezela kokhiye basesidlangalaleni (i-PKP, Ukuphina Ukhiye Womphakathi), okuvumela, kusetshenziswa isihloko se-HTTP Sokhiye Womphakathi, ukucacisa ngokusobala izitifiketi zokuthi yiziphi iziphathimandla zesitifiketi ezingasetshenziswa kusayithi elinikeziwe. Isizathu esibaluliwe isidingo esiphansi salo msebenzi, ubungozi bezinkinga zokuhambisana (usekelo lwe-PKP iyekisiwe ku-Chrome) kanye nekhono lokuvimba isayithi lakho ngenxa yokubopha okhiye abangalungile noma ukulahlekelwa okhiye (isibonelo, ukususa ngephutha noma ukuyekethisa ngenxa yokugebenga).
  • Ukuqanjwa kwamukelwe amapheshanaukuvumela ku-OpenBSD hlanganyela izingcingo zesistimu vula() и isibambiso() ngesistimu yefayela eyengeziwe kanye nenqubo yokuhlukaniswa.
  • Kususwe ukwesekwa kokuvinjwa kwezithombe ezizindeni ngazinye. Isizathu sokususwa ukuntuleka kwesidingo somsebenzi phakathi kwabasebenzisi kanye nesixhumi esibonakalayo esingalungile sokuvinjwa.
  • Ekwakheni i-Windows, isici sokuhlola sisetshenziswe ukuze kusetshenziswe izitifiketi zeklayenti ezisuka esitolo sesitifiketi sohlelo lokusebenza olujwayelekile (inketho ye-security.osclientcerts.autoload kufanele yenziwe isebenze ukuze ikwazi ukukuvula kokuthi:config).
  • Ukusekelwa kwezingxenye ze-CSS Shadow kunikwe amandla ngokuzenzakalela, kufaka phakathi "okuyingxenye"kanye ne-pseudo-element"::ingxenye", okukuvumela ukuthi ubonise ngokukhetha izakhi ezicacisiwe ukusuka Isithunzi se-DOM.


    Isigaba

    ...ku-CSS ukuze ukhethe izinto eziboshelwe engxenyeni yesibaluli:

    isakhi sangokwezifiso::ingxenye(isibonelo) {
    umngcele: okuqinile okungu-1px okumnyama;
    i-border-radius: 5px;
    i-padding: 5px;
    }

  • Kwengezwe ukusekelwa kwezincazelo I-CSS Motion Path, okukuvumela ukuthi uchaze indlela yezinto zokugqwayiza usebenzisa i-CSS ngaphandle kokusebenzisa ikhodi ye-JavaScript futhi ngaphandle kokuvimbela inqubo yokunikezela nokokufaka phakathi nokugqwayiza. Izakhiwo ze-CSS zinikezwa ukulawula ukugqwayiza
    offset,
    indlela ye-offset,
    I-offset-anchor,
    offset-ibanga и
    i-offset-zungezisa.

  • Izakhiwo ezikhethiwe zokuguqula i-CSS zinikwe amandla ngokuzenzakalelayo isikali, phenduka и Ukuhumusha, engaboshelwe endaweni guqula (okungukuthi ku-CSS ungakwazi manje ukucacisa “isikali: 2;” esikhundleni sokuthi “guqula: isikali(2);”).
  • I-JavaScript isebenzisa u-opharetha wokuhlanganisa okunengqondo "??", ebuyisela i-operand engakwesokudla uma i-operand yesokunxele i-NULL noma ingacacisiwe, futhi ngokuphambene nalokho. Isibonelo, "const foo = ibha ?? 'iyunithi yezinhlamvu ezenzakalelayo'" uma ibha ingasebenzi izobuyisela inani lebha uma kungenjalo, okuhlanganisa lapho ibha ingu-0 kanye ' ', ngokuphambene ne-opharetha ethi "||".
  • I-API eyengeziwe I-FormDataEvent kanye nomcimbi I-FormData, okwenza kube nokwenzeka ukusebenzisa izibambi ze-JavaScript ukwengeza idatha efomini lapho ihanjiswa, ngaphandle kokugcina idatha ezintweni zokufaka ezifihliwe.
  • API I-geolocation ibuyekeziwe ukuze ifane nencazelo entsha, isibonelo iqanjwe kabusha ngokuthi i-Coordinates to GeolocationCoordinates, Position to GeolocationPosition kanye
    I-PositionError ku-GeolocationPositionError.

  • Ku-JavaScript debugger kwengezwe ukwesekwa kwama-breakpoint anemibandela (indawo yokubuka), okuqalwa lapho izici ezithile zezinto zishintshwa noma zifundwa.

    Ukukhishwa kweFirefox 72

  • Ukuqalisa kwe-JavaScript debugger kuye kwasheshiswa lapho inani elikhulu kakhulu lamathebhu livuliwe (okokuqala, kuqala manje kunikezwa amathebhu abonakalayo).
  • Idizayini Ephendulayo Imodi isebenzisa ukulingiswa kwamanani embobo yokubuka ye-meta ehlukene. Kwengezwe isifanisi senani esithi “prefers-color-scheme” kumodi yokuhlola ikhasi.
  • В ama-web consoles kumodi yokuhumusha ye-JavaScript enemigqa eminingi, kungezwe ukusekelwa kokulondoloza nokuvula amafayela kusetshenziswa izinhlanganisela u-Ctrl + O no-Ctrl + S.
  • Kwengeziwe ukusetha i-javascript.options.asyncstack ukuze uhlukanise ngokubona imilayezo engavumelanisi kukhonsoli yewebhu. Uma wenza kusebenze izilungiselelo ze-console.trace() kanye ne-console.error(), inqwaba yekholi egcwele yemisebenzi evumelanayo iyaboniswa, okukuvumela ukuthi uqonde ukuthi uhlela kanjani ukwethulwa kwezibali sikhathi, imicimbi, izithembiso, amajeneretha, njll.

    Ukukhishwa kweFirefox 72

  • Kumodi yokuhlola ye-WebSocket, ukuncozulula nokuboniswa okubukwayo kwemethadatha kufomethi ye-SignalR esetshenziswa kumilayezo ye-ASP.NET Core kusetshenzisiwe. Izibali nazo zengeziwe ezibonisa isamba sikasayizi wedatha ethunyelwe nelandiwe.
  • Kuthuluzi lokuqapha umsebenzi wenethiwekhi kuthebhu ye-Timings ngokuhlukana kubonisiwe ulwazi olumayelana nokuthi insiza ngayinye ifakwe nini kulayini ukuze ilandwe, ukuthi ukulanda kuqale nini, nokuthi ukulanda kuqediwe nini.
  • Imvelo ekhishiwe kumathuluzi onjiniyela bewebhu IScratchpad, edizayinelwe ukuhlola ngekhodi ye-JavaScript (I-Scratchpad yathathelwa indawo ekukhululweni kokugcina imodi yekhonsoli yewebhu enemigqa eminingi).

Ngaphezu kwezinto ezintsha nokulungiswa kweziphazamisi kuFirefox 72, 20 ubuthakathaka, okuyi-11 (eqoqwe ngaphansi I-CVE-2019-17025 и I-CVE-2019-17024) amakwe njenganamandla okuholela ekwenzeni ikhodi yomhlaseli lapho evula amakhasi aklanywe ngokukhethekile. Ake sikukhumbuze ukuthi izinkinga zememori, njengokuchichima kwe-buffer kanye nokufinyelela ezindaweni zememori esezivele zikhululiwe, kamuva nje zimakwa njengeziyingozi, kodwa ezingabalulekile. Okunye okuphawuleka ngokukhethekile udaba CVE-2019-17017 kukhodi ye-XPCVariant.cpp, engaholela ekusebenzeni kwekhodi.

Source: opennet.ru

Engeza amazwana