Kukhishwe isiphequluli sewebhu seFirefox 93. Ngaphezu kwalokho, kwakhiwe isibuyekezo samagatsha osekelo lwesikhathi eside - 78.15.0 kanye ne-91.2.0. Igatsha leFirefox 94 lidluliselwe esigabeni sokuhlola i-beta, ukukhululwa kwaso kuhlelelwe umhla zi-2 kuNovemba.
Okuqanjiwe okuyinhloko:
- Usekelo lwefomethi yesithombe se-AVIF (AV1 Image Format) luvulwa ngokuzenzakalelayo, olusebenzisa ubuchwepheshe bokuminyaniswa kwe-intra-frame kusuka kufomethi yombhalo wekhodi wevidiyo ye-AV1. Izikhala zemibala ye-gamut egcwele futhi elinganiselwe ziyasekelwa, kanye nemisebenzi yokuguqula (ukujikeleza nokubukisa). Ukugqwayiza akukasekelwa. Ukuze ulungiselele ukuthobelana nencazelo, okuthi:config kunikeza ipharamitha ethi “image.avif.compliance_strictness”. Inani lesihloko se-ACCEPT HTTP lishintshelwe ku-"image/avif,image/webp,*/*" ngokuzenzakalelayo.
- Injini ye-WebRender, ebhalwe ngolimi lwe-Rust futhi ikuvumela ukuthi ufinyelele ukwanda okukhulu kwejubane lokunikeza futhi unciphise umthwalo ku-CPU ngokuhambisa okuqukethwe kwekhasi okuhlinzeka ngemisebenzi ohlangothini lwe-GPU, okusetshenziswa ngokusebenzisa imithunzi egijima ku-GPU, yenziwe impoqo. Kuzinhlelo ezinamakhadi evidiyo amadala noma izishayeli zezithombe eziyinkinga, i-WebRender isebenzisa imodi ye-rasterization yesofthiwe (gfx.webrender.software=true). Inketho yokukhubaza i-WebRender (gfx.webrender.force-legacy-layers kanye ne-MOZ_WEBRENDER=0) ayiqhubeki.
- Ukusekelwa okuthuthukisiwe kwephrothokholi ye-Wayland. Kwengezwe isendlalelo esixazulula izinkinga ngebhodi lokunamathisela ezindaweni ezisuselwe kuphrothokholi ye-Wayland. Kufakwe futhi izinguquko ezisiza ukususa ukucwayiza lapho usebenzisa i-Wayland lapho uhambisa iwindi emaphethelweni esikrini ekucushweni kokuqapha okuningi.
- Isibukeli se-PDF esakhelwe ngaphakathi sinikeza ikhono lokuvula amadokhumenti anamafomu e-XFA asebenzisanayo, avame ukusetshenziswa ezinhlotsheni ze-elekthronikhi zamabhange ahlukahlukene nama-ejensi kahulumeni.
- Ukuvikela kunikwe amandla ekulandeni amafayela athunyelwe nge-HTTP ngaphandle kokubethela, kodwa aqaliswe emakhasini avulwe nge-HTTPS. Ukulanda okunjalo akuvikelekile ekoneni ngenxa yokulawula ithrafikhi yezokuthutha, kodwa njengoba kwenziwa ngokuzulazula ukusuka emakhasini avulwe nge-HTTPS, umsebenzisi angase abe nemibono engamanga yokuvikeleka kwakhe. Uma uzama ukulanda idatha enjalo, umsebenzisi uzoboniswa isexwayiso, esikuvumela ukuthi ukhansele ukuvimba uma uthanda. Ukwengeza, ukulanda amafayela kuma-iframe ane-sandboxed angacacisi ngokusobala isibaluli sokuvumela ukulanda manje akuvunyelwe futhi kuzovinjwa buthule.
- Ukuqaliswa okuthuthukisiwe kwendlela ye-SmartBlock, eklanyelwe ukuxazulula izinkinga kumasayithi avela ngenxa yokuvinjwa kwemibhalo yangaphandle kumodi yokuphequlula yangasese noma uma ukuvinjwa okuthuthukisiwe kokuqukethwe okungafunwa (okuqinile) kwenziwa kusebenze. I-SmartBlock ishintsha ngokuzenzakalelayo izikripthi ezisetshenziselwa ukulandelela ngama-stubs aqinisekisa ukuthi isayithi lilayisha ngendlela efanele. Ama-Stubs alungiselelwa ezinye izikripthi zokulandela umkhondo zabasebenzisi ezifakwe ohlwini lwe-Nqamula. Inguqulo entsha ihlanganisa ukuvinjwa okuguquguqukayo kwemibhalo ye-Google Analytics, imibhalo yenethiwekhi yokukhangisa ye-Google namawijethi avela ku-Optimizely, Criteo kanye nezinsizakalo ze-Amazon TAM.
- Ekuphequluleni okuyimfihlo kanye nokuvinjwa okuthuthukisiwe kwamamodi angafuneki (okuqinile), ukuvikeleka okwengeziwe kwesihloko esithi "Referer" se-HTTP kunikwe amandla. Kulawa mamodi, amasayithi manje asenqatshelwe ukunika amandla izinqubomgomo ze-“no-referrer-when-downgrade”, “origin-when-cross-origin” kanye “ne-url engaphephile” ngesihloko se-Referrer-Policy HTTP, esivumela ukweqa okumisiwe. izilungiselelo zokubuyisela ukuthunyelwa kumasayithi ezinkampani zangaphandle nge-URL egcwele kusihloko esithi “Referer”. Masikhumbule ukuthi kuFirefox 87, ukuze kuvinjwe ukuvuza okungenzeka kwedatha eyimfihlo, inqubomgomo ethi “strict-origin-when-cross-origin” yenziwa yasebenza ngokuzenzakalelayo, okusho ukusika izindlela namapharamitha ku-“Referer” lapho uthumela. isicelo kwabanye ababungazi lapho befinyelela nge-HTTPS sidlulisa “I-Referer” engenalutho lapho sishintsha sisuka ku-HTTPS siye ku-HTTP futhi sithumela “I-Referer” egcwele yoshintsho lwangaphakathi kusayithi elifanayo. Kodwa ukusebenza koshintsho bekungabazekayo, njengoba amasayithi abekwazi ukubuyisela ukuziphatha kwakudala ngokukhohlisa nge-Referrer-Policy.
- Kuplathifomu ye-Windows, ukusekelwa kokukhipha amathebhu ngokuzenzakalelayo kumemori kuyasetshenziswa uma izinga lememori yamahhala ohlelweni lifinyelela amanani aphansi kakhulu. Amathebhu adla inkumbulo eningi futhi umsebenzisi angawafinyelelanga isikhathi eside alayishwa kuqala. Uma ushintshela kuthebhu engalayishiwe, okuqukethwe kuyo kulayishwa kabusha ngokuzenzakalelayo. Ku-Linux, lokhu kusebenza kuthenjiswe ukuthi kuzokwengezwa kokunye kokukhishwayo okulandelayo.
- Idizayini yephaneli enohlu lokulandiwe ilethwa kusitayela sokubonwayo esijwayelekile seFirefox.
- Kumodi ehlangene, isikhala phakathi kwezinto zemenyu eyinhloko, imenyu yokuchichima, amabhukumaka nomlando wokuphequlula sincishisiwe.
- I-SHA-256 yengezwe enanini lama-algorithms angasetshenziswa ukuhlela ukuqinisekiswa (Ukuqinisekisa kwe-HTTP) (ngaphambilini bekusekelwe i-MD5 kuphela).
- Ama-cipher e-TLS asebenzisa i-algorithm ye-3DES akhutshazwe ngokuzenzakalela. Isibonelo, i-TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher suite isengozini yokuhlaselwa kwe-Sweet32. Ukubuyiselwa kosekelo lwe-3DES kungenzeka ngemvume ecacile kuzilungiselelo zezinguqulo ezindala ze-TLS.
- Kuplathifomu ye-macOS, inkinga yokulahleka kwezikhathi lapho kwethulwa i-Firefox kusuka kufayela elifakiwe elithi ".dmg" isixazululiwe.
- Kusetshenziswe okusetshenziswa kubonwa ukuze kufakwe ngokubonakalayo usuku nesikhathi sento yefomu lewebhu .
- Kuzinto ezine-aria-lebula noma i-aria-lebulwe ngemfanelo, indima yemitha (indima = "imitha") iyasetshenziswa, ekuvumela ukuthi usebenzise izinkomba zamanani ezinombolo ezishintsha ebangeni elithile (ngokwesibonelo, izinkomba zokushaja ibhethri ).
- Kwengezwe usekelo lwegama elingukhiye elithi "ama-caps amancane" esakhiweni se-CSS sokuhlanganiswa kwefonti.
- Kusetshenziswe indlela ye-Intl.supportedValuesOf(), ebuyisela uhlu lwamakhalenda asekelwayo, izimali, amasistimu ezinombolo, namayunithi okulinganisa.
- Kumakilasi, kuyenzeka kusetshenziswe amabhulokhi okuqalisa amile ekhodini yeqembu esetshenziswa kanye lapho kucutshungulwa ikilasi: Isigaba C {// Ibhulokhi izosetshenziswa lapho kucutshungulwa ikilasi ngokwalo {console.log("C's static block"). ; }}
- Kungezwe usekelo lokushayela i-HTMLElement.attachInternals ukuze ufinyelele izindlela zokulawula zefomu ezengeziwe.
- Isibaluli se-shadowRoot sengezwe endleleni ye-ElementInternals, okuvumela izici zomdabu ukuthi zifinyelele impande yazo ehlukene ku-Shadow DOM, kungakhathaliseki isimo.
- Kwengezwe usekelo lwezakhiwo ze-imageOrientation kanye ne-premultiplyAlpha kundlela ye-createImageBitmap().
- Kwengezwe umsebenzi we-global reportError() ovumela imibhalo ukuthi iphrinte amaphutha kukhonsoli, ilingise ukwenzeka kokuhlukile okungabanjwanga.
- Ukuthuthukiswa kwenguqulo yenkundla ye-Android:
- Uma yethulwa kumathebulethi, izinkinobho "phambili", "emuva" kanye "nekhasi lokulayisha kabusha" zengezwe kuphaneli.
- Ukugcwalisa okuzenzakalelayo kokungena namaphasiwedi kumafomu ewebhu kunikwa amandla ngokuzenzakalela.
- Kungenzeka ukusebenzisa iFirefox njengomphathi wephasiwedi ukuze ugcwalise ukungena kanye namagama-mfihlo kwezinye izinhlelo zokusebenza (kunikwe amandla ngokuthi “Izilungiselelo” > “Ukungena kanye namaphasiwedi” > “Gcwalisa ngokuzenzakalelayo kwezinye izinhlelo zokusebenza”).
- Kwengezwe "Izilungiselelo"> "Ukungena ngemvume naphasiwedi"> "Ukungena Okulondoloziwe"> "Engeza Ngena ngemvume" ikhasi lokwengeza mathupha imininingwane kumphathi wephasiwedi.
- Kwengezwe ikhasi elithi “Izilungiselelo” > “Ukuqoqwa kwedatha” > “Izifundo bese ucisha” ikhasi, elikuvumela ukuthi wenqabe ukuhlanganyela ezicini zokuhlola.
Ngokungeziwe ezenzweni ezintsha nokulungiswa kweziphazamisi, iFirefox 93 isusa ubungozi obuyi-13, okuyi-10 kubo imakwe njengokuyingozi. 9 (okuqoqwe ngaphansi kwe-CVE-2021-38500, CVE-2021-38501 kanye ne-CVE-2021-38499) kubangelwa izinkinga zenkumbulo, njengokuchichima kwe-buffer nokufinyelela ezindaweni zenkumbulo esezikhululiwe kakade. Ngokunokwenzeka, lezi zinkinga zingaholela ekusetshenzisweni kwekhodi yomhlaseli lapho kuvulwa amakhasi aklanywe ngokukhethekile.
Ukukhishwa kwe-beta kweFirefox 94 kuphawula ukuqaliswa kwekhasi lesevisi elisha “mayelana: nokulayishwa” lapho umsebenzisi angakhipha khona amathebhu athile ngaphandle kokuwavala ukuze kuncishiswe ukusetshenziswa kwenkumbulo (okuqukethwe kuzolayishwa kabusha lapho kushintshelwa kuthebhu).
Source: opennet.ru