Munguva pfupi yapfuura Vagadziri veGoogle vakazivisa chinangwa chavo mumakore maviri anotevera kumisa zvachose tsigiro yeChannel yechitatu-bato makuki yakasimbiswa kana uchiwana masaiti kunze kwenzvimbo yeiyo razvino peji nekuti aya makuki anoshandiswa kuteedzera mashandisirwo evashandisi pakati pesaiti mune kodhi yemashambadziro ekushambadzira, eruzhinji midhiya majeti uye webhu analytics masystem.
Izvi ndizvo kufamba kunoendawo pamwe chete, ne kushevedzwa kwakaitwa nevagadziri veChromium mumaforamu avo, sezvo vaine tarisira kubvisa iyo Mushandisi-Agent musoro pamwe nekurambidza kupinda kune iyo navigator.userAgent chivakwa muJavaScript.
Todo izvi zvinokonzerwa neyakavanzika Sandbox chirongwa nechinangwa chekusvika pakubvumirana pakati pekudiwa kwekuchengetedza zvakavanzika zvevashandisi uye chishuwo chemasaiti ekushambadzira nenzvimbo dzekuteedzera zvinodiwa nevashanyi.
Pakupera kwegore rino, mune bvunzo modhi pakutanga, mamwe maAPI anotarisirwa kuverengerwa mubrowser kuyera kutendeuka uye kuita munhu wekushambadzira pasina kushandisa kwechitatu-bato makuki.
Kuti uone chikamu chekufariras yevashandisi vasina kuita chiratidzo cheumwe munhu uye vasingarevi nhoroondo yekushanya kune mamwe masosi, Ad network anokokwa kuti ashandise iyo Floc APIZvakare nekuyedza mushandisi chiitiko mushure mekuchinjira kushambadziro, chiyero chekushandurwa kweAPI uye kupatsanura vashandisi pasina kushandisa zvitupa pakati pesaiti neChiratidzo API Trust.
Tiri kushingairira kushanda mukati meiyo ecosystem kuti tipe mabhurawuza, vaparidzi, vanogadzira, uye vashambadzi mukana wekuyedza idzi nzira nyowani, kuyedza kuti dzinoshanda zvakanaka here mumamiriro akasiyana siyana, uye nekuvandudza kuita kwekutsigira, kusanganisira kushambadzira kwekushambadza uye kuyera, kuramba kweSevhisi Kudzivirira (DoS), antispam / kubiridzira uye kusimbiswa kwechokwadi.
Iko kuvandudzwa kweanotsanangurwa ane chekuita nekuratidzwa kwakanangidzirwa kushambadzira pasina kutyora zvakavanzika kunoitwa neboka rakasiyana rinoshanda rakagadzirwa nesangano reW3C.
Parizvino, mune mamiriro e kudzivirirwa kubva kuendesa makuki panguva yekurwiswa kweCSRF, hunhu hweSameSite hunoshandiswa yakatsanangurwa mune Set-Cookie musoro, iyo, saiyo Chrome 76, yakagadzirirwa ku "SameSite = Lax" nekumira, ichitadzisa kutumirwa kwemakuki kubva kune vechitatu-bato saiti, asi saiti dzinogona kubvisa iyo mvumo nekuisa pachena SameSite = Hapana kana kumisikidza cookie.
Iyo SameSite hunhu unogona kutora tsika mbiri dze 'solid' kana 'lax'.
- Mune "yakaoma" maitiro, makuki haana kutumirwa kune chero mhando yechikumbiro chesaiti-saiti.
- Paunenge uri mu "lax" maitiro, zvirambidzo zvakapepuka zvinoshanda uye kufambiswa kwemakuki kunovharirwa chete kune zvechipiri zvikumbiro pakati pesaiti, sekukumbira mufananidzo kana kurodha zvirimo kuburikidza neframe.
Mune inotevera vhezheni ye Chrome 80 (iyo yakarongerwa Kukadzi 4) kurambidzwa kuchashanda Kunyanya kuomarara iyo inorambidza kugadziriswa kwechitatu-bato makuki yezvikumbiro kunze kweHTTPS (ine hunhu SameSite = Hapana, makuki anogona kungoiswa munzira yakachengeteka).
Uyewo, basa rinoenderera mberi pakuitwa kwezvishandiso kuziva nekuchengetedza kubva pakushandiswa kwekuvanzika uye nzira dzekutevera dzekupfuura ("mabrowser eminwe").
MuFirefox kubva mushanduro 69, nekungogara makuki haana hanya neese echitatu-bato rekutevera masystem.
Google inoona kuvharidzira uku kuchiruramiswa, asi zvinoda kutanga kugadzirira webhu ecosystem uye kupihwa mamwe maAPI ekugadzirisa mabasa ayo echitatu-bato makuki akamboshandiswa, pasina kutyora zvakavanzika uye pasina kukanganisa maitiro emari enzvimbo dzakapihwa mari kuburikidza kuratidzwa kwezviziviso.
Mukupindura kuvharira makuki pasina kupa imwe nzira, netiweki dzekushambadza hadzina kumira kuteedzera, asi dzakangoshanduka kushandisa nzira dzakaomarara zvichibva pakuzivikanwa kwevashandisi (zvigunwe zvemunwe) kana kugadzira matunhu akapatsanurwa eanoteedzera pane domain resaiti pane kushambadza inoratidzwa.
mabviro: https://blog.chromium.org