Ukukhishwa kwesiphequluli sewebhu se-Chrome 124

I-Google ishicilele ukukhishwa kwesiphequluli sewebhu se-Chrome 124 Ngesikhathi esifanayo, ukukhululwa okuzinzile kwephrojekthi yamahhala ye-Chromium, esebenza njengesisekelo se-Chrome, iyatholakala. Isiphequluli se-Chrome siyahluka kusukela ku-Chromium ekusebenziseni amalogo e-Google, ukuba khona kwesistimu yokuthumela izaziso uma kuba nokuphahlazeka, amamojula okudlala okuqukethwe kwevidiyo okuvikelwe ikhophi (i-DRM), isistimu yokufaka ngokuzenzakalela izibuyekezo, evumela unaphakade ukuhlukaniswa kwe-Sandbox , inikezela ngokhiye ku-Google API futhi idlulisa i-RLZ- uma isesha. Kulabo abadinga isikhathi esengeziwe sokubuyekeza, igatsha LeSitebele Esinwetshiwe lisekelwa ngokuhlukile, lilandelwe amaviki angu-8. Ukukhishwa okulandelayo kwe-Chrome 125 kuhlelelwe uMeyi 14.

Izinguquko ezibalulekile ku-Chrome 124:

  • Kuhlobo lwe-Android, umphathi webhukumaka manje usekela ukulondolozwa kwamabhukhimakhi kanye nohlu lokufunda kamuva ku- amaseva I-Google ixhunywe ku-akhawunti yomsebenzisi.
  • I-Chrome ye-Android ihlanganisa indlela entsha yokugcina amaphasiwedi endawo angavunyelaniswanga kuwo wonke amadivayisi. Ngaphambilini, amaphasiwedi endawo abegcinwa kuphrofayela ye-Chrome, kodwa manje azogcinwa endaweni yokubeka iphasiwedi ehlinzekwe Izinsizakalo ze-Google Play, esezivele zisetshenziselwa ukugcina iphasiwedi ye-akhawunti ye-Google.
  • Ekwakheni i-Windows, i-macOS ne-Linux, i-TLS ihlanganisa ngokuzenzakalelayo ukusekelwa kwendlela yokuhlanganisa ukhiye (i-KEM, i-Key Encapsulation Mechanism), esebenzisa i-algorithm ye-X25519Kyber768 hybrid, imelana nokukhethwa kumakhompyutha we-quantum. I-X25519Kyber768 iyinhlanganisela ye-X25519 key exchange mechanism esekelwe kumajika ayi-elliptic, manje asetshenziswa ku-TLS, ne-algorithm ye-Kyber-768, esebenzisa izindlela ze-cryptography ezisekelwe ekuxazululeni izinkinga zethiyori ye-lattice, isikhathi sesixazululo esifanayo esivamile kanye ne-quantum. amakhompyutha.
  • Lapho unikeza umbhalo, umtapo wezincwadi we-Skia ucabangela ukugqama nezilungiselelo zombala ezicaciswe ku-Windows zobuchwepheshe bokushelela kombhalo we-ClearType, obungathuthukisa kakhulu ikhwalithi yokuboniswa kwefonti kumamonitha e-LCD. Ekwakheni i-Linux, amafonti asetshenziswe kusixhumi esibonakalayo ashintshe ngokuphawulekayo.
    Ukukhishwa kwesiphequluli sewebhu se-Chrome 124
  • Kuyenzeka ukuthi ufake noma yiliphi ikhasi lewebhu njengohlelo lokusebenza lwe-PWA oluzimele (Izinhlelo Zewebhu Eziqhubekayo), noma ngabe leli khasi alihlangabezani nemibandela ye-PWA.
  • Ngokuhambisana nezidingo ze-European DMA (Digital Markets Act), ibhokisi linikezwa ukuze kukhethwe injini yokusesha ezosetshenziswa ngokuzenzakalela. Kunezinjini zokusesha ongakhetha kuzo, ezitholakala esigabeni sezilungiselelo “chrome://settings/search”. Izinjini zokusesha ohlwini ziboniswa ngokulandelana okungahleliwe. Ku-Chrome 120, le ngxoxo ihlolelwe u-1% wabasebenzisi, futhi manje isinikwe amandla kuwo wonke umuntu.
    Ukukhishwa kwesiphequluli sewebhu se-Chrome 124
  • Kusetshenziswe isicelo somsebenzisi sokunikeza izimvume uma uhlelo lokusebenza lwewebhu lufinyelela i-Web MIDI API, ekuvumela ukuthi uxhumane namadivayisi omculo ane-MIDI interface exhunywe kukhompuyutha yakho. Ngaphambilini, izicelo zemvume beziboniswa kuphela lapho kuthunyelwa noma kwamukelwa imilayezo ye-SysEx, kodwa manje zizoboniswa noma nini lapho kufinyelelwa khona i-Web MIDI API. Isizathu soshintsho sibalulwe njengezimo lapho amakhasi ewebhu angahleliwe athatha khona ukulawula okukhethekile kwesilawuli se-MIDI, avimbe amandla ezinye izinhlelo zokusebenza ukusebenza ngaso. Izinkinga zokuphepha nazo ziyaphawulwa, njengoba iWeb MIDI API ikuvumela ukuthi ulawule ngokugcwele idivayisi ye-MIDI, okuhlanganisa ukufaka eyakho i-firmware.
  • I-Web SQL API, engalinganisiwe, ayivamile ukusetshenziswa, futhi idinga ukusetshenzwa kabusha ukuze ihlangabezane nezimfuneko zokuphepha zesimanje, iyekiswe ngokuphelele. I-Web SQL ikhutshaziwe ngokuzenzakalela kusukela ku-Chrome 119, kodwa kube nesilungiselelo sokuyibuyisela emuva. Lesi silungiselelo manje sesisusiwe. Konjiniyela abadinga lokhu kusebenza, kuphakanyiswa ukuthi basebenzise okuhlukile kwelabhulali ye-SQLite ehlanganiswe ekubukeni kwe-WebAssembly.
  • Kwengezwe ikhono lokulawula indlela yokubhala yombhalo ekhonjiswa ngokuqondile ezintweni zefomu lewebhu (khetha, imitha, inqubekelaphambili, inkinobho, indawo yombhalo nokokufaka) lapho kukhethwa ukuma okuqondile kusetshenziswa isici se-CSS semodi yokubhala. Ukuze ubonise umbhalo ukusuka phezulu kuye phansi, manje ungasebenzisa isici sefomu esithi “ltr”, futhi ukusuka phansi kuye phezulu – “rtl”.
  • I-API ye-User-Agent Client Hints, eyathuthukiswa esikhundleni sesihloko se-User-Agent, ingeze ukwesekwa kwepharamitha ye-Sec-CH-UA-Form-Factors, evumela iklayenti ukuthi lazise iseva ngesici sefomu ledivayisi yomsebenzisi (ideskithophu, izimoto, iselula, i-XR, i-EInk, kanye ne-Watch). I-User-Agent Client Hints ivumela ukulethwa okukhethiwe kwedatha mayelana nesiphequluli esithile kanye namapharamitha esistimu (inguqulo, ipulatifomu, njll.) kuphela ngemuva kwesicelo. isevaUmsebenzisi, naye, anganquma ukuthi yiluphi ulwazi olunganikezwa abanikazi bewebhusayithi. Uma usebenzisa amacebo eklayenti e-User-Agent, isihlonzi sesiphequluli asidluliselwa ngaphandle kwesicelo esicacile, futhi amapharamitha ayisisekelo kuphela anikezwa ngokuzenzakalelayo, okwenza ukuhlonza okungasebenzi kube nzima.
  • Kwengezwe amandla okulawula ukuhlanganisa kwezimpande ngazinye ku-Shadow DOM, okwenziwa ngemiyalo efana ne-cloneNode(). Amandla okufanisa amagatsha ezimpande ze-DOM anikwe amandla kusetshenziswa ipharamitha ekwazi ukuhlanganisa (“attachShadow({clonable:true})”) noma isibaluli se-“shadowrootclonable” ( ).
    Dlala ividiyo
  • Kwengezwe izindlela ezintsha ze-setHTMLUnsafe() kanye ne-parseHTMLUnsafe() ukuze usebenzise i-syntax ye-Shadow DOM evela ku-JavaScript. Izindlela ze-setHTMLUnsafe() kanye ne-parseHTMLUnsafe() ezifana ne-innerHTML kanye ne-DOMParser.parseFromString(), zikuvumela ukuthi ufake noma uhlukanise okuqukethwe ngefomethi ye-HTML ukwenze into, kodwa ziyahluka ekusekeleni ukucubungula izici zesifanekiso ngesibaluli se-shadowrootmode.
  • Ukwesekwa okwengeziwe kwe-WebSocket Stream API, ekuvumela ukuthi udlulise idatha phakathi kwesiphequluli neseva kumodi yokusakaza ngaphandle kokusebenzisa ukuvota, okulungele ukuhlela ukudluliswa nokwamukela idatha engenayo njalo, isibonelo, ekusebenziseni ingxoxo. const wss = i-WebSocketStream entsha(WSS_URL); const {readable, writable} = wait wss.opened; const reader = readable.getReader(); const writer = writable.getWriter(); ngenkathi (iqiniso) {const {value, done} = lindela umfundi.funda (); uma (kwenziwe) {break; } umphumela we-const = inqubo yokulinda(inani); linda umbhali.bhala(umphumela); }
  • Amandla e-View Transitions API anwetshiwe, okwenza kube lula ukudala imiphumela yenguquko yokugqwayiza phakathi kwezifunda ezihlukene ze-DOM (isibonelo, ukuguquka okushelelayo kusuka kwesinye isithombe kuya kwesinye). Inguqulo entsha yengeza usekelo lomcimbi "wokushintshana kwamakhasi", owakhelwe into "yewindi" lapho into "yedokhumenti" ehlotshaniswayo ithathelwa indawo entsha phakathi nokuzulazula. Okunye okwengezwe yisakhiwo “sokuvimbela-ukunikezela,” esikuvumela ukuthi uvimbele ukunikezwa kwedokhumenti kuze kuqedwe ukuhlukaniswa kokuqukethwe okubalulekile.
  • Kwengezwe ipharamitha ye-disallowReturnToOpener, ephasiswe lapho kubizwa indlela yesiceloWindow, ekuvumela ukuthi ukhiphe inkinobho yokubuyela emuva efasiteleni elivuliwe kumodi yesithombe-esithombeni ukuze uvimbele ukubuyela kuthebhu iwindi elivulwe kulo.
  • Kwengezwe amandla okusetha isibaluli se-CSSImportRule.styleSheet sibe NULL ukuze kuboniswe ukuthi alikho ishidi lesitayela elihlobene. Kwengezwe CSSKeyframesRule.length isibaluli esibonisa inani lezakhiwo ezizokhonjiswa.
  • Ezinkambuni ezihlelekayo, isibaluli "seziphakamiso zokubhala" sisetshenzisiwe ukuze kulawulwe ukuthi izincomo ziyaboniswa yini njengoba uthayipha.
  • Usekelo lwe-ServiceWorker ne-SharedWorker lwengezwe ku-WebGPU API.
  • Usekelo olungeziwe lwesihloko se-HTTP esithi "Okubalulekile", lapho ungadlulisela khona ulwazi mayelana nokubalulekile kokucubungula isicelo (RFC 9218) esigabeni sokufinyelela kokuqala esisetshenziswa.
  • Ukuthuthukiswa kwenziwe kumathuluzi onjiniyela bewebhu. Iphaneli entsha yokugcwalisa ngokuzenzakalelayo ingeziwe ukuze kuhlolwe ulwazi olusetshenziswa ukugcwalisa amafomu ngokuzenzakalelayo.
    Ukukhishwa kwesiphequluli sewebhu se-Chrome 124

    Iphaneli Yokuhlola Izitayela ze-CSS ithuthukise ukusekela kwezitayela ezibekwe esidlekeni. Iphaneli yokulinganisa ukusebenza inikeza ikhono lokufihla imisebenzi engadingekile kanye nezingcingo ezihambisana nazo zezingane ukuze kuncishiswe umsindo kugrafu. Ukusekelwa kokugqwayiza okuboshelwe kokuqukethwe okuskrola (Ukugqwayiza okuqhutshwa ukuskrola) kwengezwe kuphaneli yokususa amaphutha opopayi. Iphaneli yokuhlola inethiwekhi ikuvumela ukuthi usethe imingcele yokulahleka kwephakethe kanye nosayizi womugqa wenethiwekhi ukuze uhlole ukusebenza kwezinhlelo zokusebenza ze-WebRTC uma kunezinkinga zenethiwekhi.

    Ukukhishwa kwesiphequluli sewebhu se-Chrome 124

Ngokungeziwe ezenzweni ezintsha nokulungiswa kweziphazamisi, inguqulo entsha isusa ubungozi obungu-22. Ubungozi obuningi buhlonzwe njengomphumela wokuhlolwa okuzenzakalelayo kusetshenziswa i-AddressSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer kanye namathuluzi e-AFL. Azikho izinkinga ezibucayi ezitholiwe ezingavumela umuntu ukuthi adlule wonke amazinga okuvikela isiphequluli futhi akhiphe ikhodi kusistimu engaphandle kwendawo ye-sandbox. Njengengxenye yohlelo lokukhokha imiklomelo yemali ngokuthola ubungozi ekukhishweni kwamanje, i-Google ikhokhele imiklomelo engu-13 enani lamadola ayizinkulungwane ezingu-65 (umklomelo owodwa wama-$20000, ama-$10000, ama-$7000 nama-$2000, imiklomelo emithathu ka-$5000 kanye no-$3000, imiklomelo emibili. ngama- $1000). Usayizi womklomelo owodwa awukakanqunywa.

Source: opennet.ru

Engeza amazwana