Ukukhishwa kweFirefox 77

Isiphequluli sewebhu sikhululiwe I-Firefox 77Futhi inguqulo yeselula IFirefox 68.9 yesikhulumi se-Android. Ngaphezu kwalokho, isibuyekezo senziwe amagatsha ukwesekwa kwesikhathi eside 68.9.0. Uyeza maduze esiteji ukuhlolwa kwe-beta Igatsha leFirefox 78 lizoshintsha, ukukhululwa kwalo kuhlelelwe uJuni 30.

main emisha:

  • Kwengeziwe ikhasi elisha lesevisi "mayelana: nesitifiketi" sokufinyelela isixhumi esibonakalayo esakhelwe ngaphakathi ukuze ubuke izitifiketi. Kusixhumi esibonakalayo, ungabonisa uhlu lwezimpande nezitifiketi ezilondoloziwe, buka imininingwane yesitifiketi ngasinye, nezitifiketi zokuthekelisa (usekelo lokungenisa alukatholakali).
    Ukukhishwa kweFirefox 77

  • Kwengezwe ukusekelwa kokuhlola kwefomethi yesithombe se-AVIF (AV1 Image Format), esebenzisa ubuchwepheshe bokuminyaniswa kwe-intra-frame kusuka kufomethi yombhalo wekhodi wevidiyo ye-AV1 (isekelwa ukuqala ngeFirefox 55). Ukuze unike amandla i-AVIF kokuthi:config kunenketho ethi image.avif.enabled. Isiqukathi sokusabalalisa idatha ecindezelwe ku-AVIF sifana ngokuphelele ne-HEIF. I-AVIF isekela zombili izithombe ku-HDR (High Dynamic Range) kanye nesikhala sombala we-Wide-gamut, kanye nakububanzi obujwayelekile obujwayelekile (SDR).
  • Kunwetshiwe inombolo ye izinhlelo lapho isistimu yokuhlanganisa ivuliwe I-WebRender, ebhalwe nge-Rust futhi ikuvumela ukuthi ukhuphule kakhulu isivinini sokunikeza futhi unciphise umthwalo we-CPU. Ikhasi le-WebRender likhipha okuqukethwe kwekhasi elinikeza imisebenzi ohlangothini lwe-GPU, olwenziwa ngokusebenzisa imithunzi esebenza ku-GPU. I-WebRender isikhona manje kuhlanganisiwe kumishini nge I-Intel Skylake GT1, AMD Raven Ridge, AMD Evergreen APU kanye nakumakhompyutha aphathekayo anamakhadi ezithombe e-NVIDIA asebenza ku-Windows 10. Ukuze uphoqelele ukunika amandla ku-:config, kufanele wenze kusebenze izilungiselelo ze-“gfx.webrender.all” kanye ne-“gfx.webrender.enabled” noma usebenzise iFirefox. ngesethi eguquguqukayo yemvelo MOZ_WEBRENDER=1.
  • Kubha yekheli ithuthukisiwe ukuhlaziywa kwemishwana yosesho. Amagama anechashazi manje ayahlolwa ukuze ahlotshaniswe nawo izizinda zamanje (ngokwesibonelo, ngaphambilini, ukufaka okhiye abafana ne-“test.log” akuzange kuholele ekusesheni, kodwa emzamweni wokuvula isayithi, nokufaka “idatha:url” enezikhala kanye nophawu lombuzo oluholele ekusesheni, hhayi khipha).
  • Kwengeziwe ukwesekwa amandla ozikhethela, isicelo lapho izengezo zingabangeli isaziso mayelana nokuqinisekiswa kwamalungelo amasha lapho ufaka noma ubuyekeza isengezo, kodwa siboniswa lapho isengezo sifinyelela ngokuqondile umsebenzi odinga amalungelo aphakeme. Izimvume ezingamenyezelwa njengezingakhethwa zifaka phakathi ukuphathwa, ama-devtools, i-browsingData, pkcs11
    ummeleli kanye neseshini. Isisusa sokwengeza izimvume ozikhethela isifiso sokunciphisa umthwalo kubasebenzisi lapho bebuyekeza izengezo kanye nokunikeza ikhono lokubuyekeza isengezo ngaphandle kokuqinisekisa izimvume (ngaphambilini, uma umsebenzisi engavumelananga nezimvume, isengezo asibuyekeziwe).

  • Kubasebenzisi base-UK ekhasini lethebhu entsha kufakiwe ukubonisa okuqukethwe okunconywe isevisi ye-Pocket. Amakhasi afanayo ngaphambilini Fikile kuphela kubasebenzisi abavela e-USA, Canada naseJalimane. Ukwenza kube ngokwakho okuhlotshaniswa nokukhethwa kokuqukethwe kwenziwa ohlangothini lweklayenti futhi ngaphandle kokudlulisela ulwazi lomsebenzisi kubantu besithathu (lonke uhlu lwezixhumanisi ezinconyiwe zosuku lwamanje lulayishwa esipheqululini, esibalwa ngasohlangothini lomsebenzisi ngokusekelwe kudatha yomlando wokuphequlula. ). Kufanele kuqashelwe ukuthi amabhlogo akhokhelwe abaxhasi aboniswa e-USA kuphela futhi amakwe ngokucacile njengawokukhangisa; izindatshana zokukhangisa azikasetshenziswa kwamanye amazwe. Ukuze ukhubaze okuqukethwe kwe-Pocket okunconyiwe, kukhona a ukwenza ngokwezifiso kusilungiseleli (Okuqukethwe Kwasekhaya kweFirefox/Kunconywe yi-Pocket) kanye nenketho ethi “browser.newtabpage.activity-stream.feeds.topsites” kokuthi:config.

    Ukukhishwa kweFirefox 77

  • Ku-configurator, kubhulokhi eyehlayo yezindlela zokuvimbela i-Cookie esigabeni sezilungiselelo zokuvinjwa kokulandelela ukunyakaza. kungezwe into entsha yokuhlukaniswa kwe-Cookie ashukumisayo ngesizinda esiboniswe kubha yekheli (“I-Dynamic First Party Isolation", uma okufakiwe kwakho nokwenkampani yangaphandle kunqunywa ngokusekelwe kusizinda sesizinda sesayithi). Mayelana ne-:config, isixhumi esibonakalayo sinikwe amandla ngesilungiselelo esithi “browser.contentblocking.reject-and-isolate-cookies.preferences.ui.enabled” noma ngokuqondile “network.cookie.cookieBehavior = 5”.

    Ukukhishwa kweFirefox 77

  • Ukwenza ukuzulazula kube lula kumadivayisi wesikrini esithintwayo anda ukupheda kubha yamabhukumaka (uma uvula ithebhu entsha, ibha yekheli le-Megabar entsha yeqa kancane ibha yamabhukhimakhi futhi ishiya indawo encane yokuchofoza).
  • Kwenziwa izingxoxo ze-modal ezintsha eziboshelwe kumathebhu ngamanye futhi zingavimbeli sonke isixhumi esibonakalayo. Ukulawula ukuthi ukubophezela kwengxoxo kuvuliwe yini, izinketho ze-“prompts.defaultModalType”, “prompts.modalType.confirmAuth” kanye ne-“prompts.modalType.insecureFormSubmit” zengezwe kokuthi mayelana:config (1 - ukubophezela kokuqukethwe, 2 - okubophezela kuthebhu , 3 - ukubophezela efasiteleni).

    Ukukhishwa kweFirefox 77

  • Mayelana ne:config kwengezwe isilungiselelo esisha middlemouse.openNewWindow, ongakhubaza ngaso ukusetshenziswa kwenkinobho yegundane ephakathi ukuvula isixhumanisi kuthebhu entsha.
  • Kususiwe setting browser.urlbar.update1.view.stripHttps (usekelo lokusetha browser.urlbar.trimURLs lugciniwe).
  • Kusukela injini Gecko ngokuphelele kususiwe ukwesekwa
    Amagridi we-XUL.

  • Ngokuzenzakalelayo, ukuzungezisa okuzenzakalelayo kwezithombe ze-JPEG kunikwe amandla ngokusekelwe kudatha evela ku-Exif.
  • Kukhishwe isilungiselelo esithi "browser.urlbar.oneOffSearches". Ukufihla izinkinobho zezinye izinjini zokusesha ezivela uma uqala ukuthayipha ekhelini noma kubha yokusesha, ungakhetha izinjini zokusesha ozifunayo ku- about:preferences#ikhasi lokusesha.

    Ukukhishwa kweFirefox 77

  • Umbhalo ongangeni phakathi kwesibophezelo se-"maxlength" awusanqanyulwa uma unamathiselwe ezinkambini Futhi .
  • Indlela eyengeziwe String.prototype.replaceAll () (String#replaceAll), ebuyisela iyunithi yezinhlamvu entsha (uchungechunge lwangempela luhlala lungashintshiwe) lapho kushintshaniswa konke okufanayo ngokusekelwe kuphethini enikeziwe. Amaphethini angaba amamaski alula noma izinkulumo ezivamile.
  • Inikwe amandla ukuze kuboniswe inani lelebula elishiwo kusetshenziswa isibaluli “selebula” kusici uma okuqukethwe kwe-elementi kungenalutho.
  • I-IndexedDB isebenzisa isakhiwo IDBCursor.request.
  • Kwengeziwe ukwesekwa kwesakhiwo sokuhlola Umsebenzi Wamatshe ezitsheni zegridi.
  • Kumathuluzi Wonjiniyela kwengezwe iphaneli ukuhlola izinkinga ezingaba zokusebenzisana neziphequluli ezahlukene (ibonisa ukuthi yiziphi iziphequluli ezisekela isakhiwo esithile se-CSS esiboshelwe kusici esikhethiwe). Inikwe amandla nge-devtools.inspector.compatibility.enabled setting in about:config.

    Ukukhishwa kweFirefox 77

  • Ingxenye enkulu yengeziwe ukuthuthukiswa kusilungisi sephutha se-JavaScript. Ukulayisha nokulungisa iphutha ngesinyathelo ngesinyathelo kuyasheshiswa, ukusetshenziswa kwememori kuyancipha. Ukuqhathaniswa kokubukwa kwekhodi okuhlukile (imephu yomthombo) kuthuthukisiwe, okukuvumela ukuthi ubuke okuguquguqukayo kumakhodi omthombo wangempela lapho ususa iphutha kumamojula angumphumela. Lapho ushintsha umugqa okhethiwe ngokuchofoza efasiteleni le-Call Stack futhi uqala ukwenza isinyathelo ngesinyathelo (Nyathela ngapha, F10), isilungisi sephutha sizokhipha ikhodi ize ifike emugqeni olandela ekhethiwe. Imenyu yengezwe kuphaneli (isithonjana segiya), okwamanje enento eyodwa kuphela yokukhubaza i-JavaScript. Kwengezwe ikhono lokusetha amaphoyinti okunqamuka anemibandela (amaphoyinti wokubuka), amisa isikhashana ukwenza lapho kushintsha noma kufundwa amanani athile (ngaphambilini bekwenzeka ukumisa isikhashana ukwenza lapho kufundwa futhi kushintshwa ngokuhlukene).

    Ukukhishwa kweFirefox 77

  • Imenyu yengezwe kuphaneli yokusebenzelana yokuhlola umsebenzi wenethiwekhi, equkethe imisebenzi yokuphatha ukugawulwa kwemithi (ukulondoloza ilogi phakathi kwemithwalo yesayithi, ukungenisa ifayela le-HAR, ukubhala ifayela le-HAR). Imenyu yokuqukethwe yengezwe kuphaneli Yokuvimbela Isicelo ukuze unike amandla, ukhubaze futhi ususe izinto ezivinjiwe.
    Ukukhishwa kweFirefox 77

  • Ukuxhuma Usekelo lwe-FTP lubambezelekile kwaze kwaba yiFirefox 79, kodwa inketho isivele yengeziwe ukulawula umsebenzi we-FTP (network.ftp.enabled in about:config).

Ngokungeziwe ezenzweni ezintsha nokulungiswa kweziphazamisi kuFirefox 77 kuqedwe 9 ubungozi, okungu-7 kwakho kumakwe njengokuyingozi:

  • Ukuba sengozini okune (kuqoqwe ngaphansi I-CVE-2020-12411 и
    I-CVE-2020-12409) zibangelwa izinkinga zememori, njengokuchichima kwe-buffer kanye nokufinyelela ezindaweni zememori esezikhululiwe. Ngokunokwenzeka, lezi zinkinga zingaholela ekusetshenzisweni kwekhodi yomhlaseli lapho kuvulwa amakhasi aklanywe ngokukhethekile.

  • Ukuba sengozini
    I-CVE-2020-12406 ibangelwa ukuntuleka kokuhlola uhlobo lapho kususwa izinto ze-NativeTypes futhi ingase isetshenziselwe ukudala ikhodi yomhlaseli ukuthi iqalise.

  • Ukuba sengozini kwe-CVE-2020-12405 kubangelwa i-Use-after-free memory block ku-SharedWorkerService futhi kukhawulelwe ekubangeleni ukuphahlazeka.
  • Ukuba sengozini kwe-CVE-2020-12399 kungenxa yokuba sengozini kwelabhulali ye-NSS ekuhlaselweni kwesiteshi eseceleni. ukuvumela Ngokusekelwe ekuhlaziyweni komehluko esikhathini sokubala, buyisela ukhiye oyimfihlo wesiginesha yedijithali ye-DSA.

Source: opennet.ru

Engeza amazwana