Chrome ichadzivirira pakurwisa kwechitatu-bato makuki uye kuzivikanwa kwakavanzika

Google Chrome

Google Chrome

Google yakazivisa kuunzwa kweshanduko mune ramangwana kuChannel, inoitirwa kugadzirisa zvakavanzika. Yokutanga chikamu chekuchinja inoreva kubata kwemakuki uye kutsigirwa kweiyo SameSite hunhu.

Kutanga nekuburitswa kweChannel vhezheni 76 (inotarisirwa muna Chikunguru),  iyo brand "yakafanana-saiti-ne-default-makuki" ichaitwa kuti, mukushayikwa kwechiratidzo cheSameSite mune Set-Cookie musoro, iyo kukosha "SameSite = Lax" ichaiswa nekumisikidza, iyo inoganhurira kutumirwa kwemakuki.

Zvechitatu bato saiti inoisa (asi masosi achazokwanisa kubvisa iyo ganhuriro, zviripachena nekumisikidza SameSite = Hapana kana uchigadzika kuki).

Ipa SameSite inobvumira web browser (chrome) tsanangura mamiriro ezvinhu umo kuchinjirwa kwekuki kunogamuchirwa apo chikumbiro chinobva kune wechitatu webhusaiti.

Parizvino, bhurawuza rinotumira maKuki pane chero chikumbiro kune saiti iyo makuki akaisirwa, kunyangwe kana imwe saiti ikatanga kuvhurwa uye iko kufona kunoitwa zvisina kunangana nekutora mufananidzo kana kushandisa iframe.

Nezve SameSite

Ad netiweki anoshandisa chinhu ichi kuteedzera kufamba kwevashandisi pakati pemasaiti uye varwisi kuronga CSRF kurwisa(Kana sosi-inodzorwa neanorwiswa ichivhurwa, chikumbiro chakavanzwa kubva pamapeji ayo kuenda kune imwe saiti uko iko iko iko iko mushandisi kusimbiswa, uye bhurawuza remushandisi rinogadza makuki echikamu echikumbiro ichocho.)

Kune rimwe divi, iko kugona kutumira makuki kunzvimbo dzechitatu-bato kunoshandiswa kuisa zviwiwa pamapeji, semuenzaniso, kusangana neYouTube kana Facebook.

Nekushandisa iyo SameSite hunhu, iwe unogona kudzora maitiro kana uchiisa makuki uye bvumira kutumirwa kwemakuki chete mukupindura kune zvikumbiro zvakatangwa kubva kune saiti kubva kwayakatambirwa aya makuki.

SameSite inogona kutora matatu matatu "Akasimba", "Lax" uye "Hapana".

Mune yakaoma mamiriro ("Zvakasimba")Cookies haatumirwe chero mhando yemuchinjiko -saiti zvikumbiro, kusanganisira zvese zvinowanda zvinongedzo kubva kunze kwenzvimbo.

Mumamiriro "Lax": Zvigadziriso zvakapfava zvinoshanda uye kuendesa kuki kunovharirwa chete kune echinjisa-saiti zvikumbiro senge chikumbiro chemufananidzo kana kurodha zvemukati kuburikidza neiframe.

Musiyano uripo pakati pe "" Wakasimba "na" Lax "unodzikira pakuvhara makuki kana chinongedzo chikateverwa.

Dzimwe shanduko

Yeimwe shanduko dziri kuuya dzinotarisirwa kune dzemberi shanduro dzeChannel, muganho wakasimba wakarongerwa kurambidza kugadzirwa kwechitatu-bato makuki yezvikumbiro zvisina HTTPS (ine hunhu SameSite = Hapana, makuki anogona chete kusetwa muSafe mode).

Uye zvakare, basa rakarongerwa kudzivirira kubva pakushandiswa kwebrowser fingapurindi, kusanganisira nzira dzekugadzira zvitupa zvichibva pane zvisina kunangana data senge resolution yechiso, rondedzero yemhando dzakatsigirwa dzeMIME, mamwe maparameter mumusoro (HTTP / 2 neHTTPS), ongororo yemapulagi uye akaisirwa mafonti.

Zvakare nekuwanika kwemamwe mawebhu webhu, Vhidhiyo kadhi yakatarwa yekupa mashandisiro uchishandisa WebGL uye Canvas, CSS manomano, kuongororwa kwemakonzo uye keyboard maitiro.

Uye zvakare, Chrome ichave nekudzivirira kubva lkushungurudzwa kunoenderana ne kuoma kwekudzoka kune iyo yekutanga peji mushure mekuchinjira kune imwe saiti (iko kuita kwakanaka, kunopesana nenzvimbo dzinoendesa iwe pakati pemapeji).

Tiri kutaura nezve tsika yekuzadza nhoroondo yekushandurwa neakateedzana otomatiki redirects kana yekunyepedzera kuwedzera dummy zvinyorwa kune yekuvhura nhoroondo (kuburikidza pushState), semhedzisiro iyo mushandisi asingakwanise kushandisa «Kudzoka» bhatani kudzoka. peji rekutanga mushure mekushanduka-shanduka kana kumanikidzwa kuendesa kunzvimbo yekutsotsi

Kuchengetedza kubva pamabatiro akadaro, Chrome iri mubhatani bhatani rinobata richadarika matanda ane hukama ne auto-kutumira uye kushanyira nhoroondo yekumanikidza, ichisiya chete mapeji akavhurwa nezviito zvakajeka zvemushandisi.

mabviro: https://blog.chromium.org/


Siya yako yekutaura

Your kero e havazobvumirwi ichibudiswa. Raida minda anozivikanwa ne *

*

*

  1. Inotarisira iyo data: Miguel Ángel Gatón
  2. Chinangwa cheiyo data: Kudzora SPAM, manejimendi manejimendi.
  3. Legitimation: Kubvuma kwako
  4. Kutaurirana kwedata
  5. Dhata yekuchengetedza: Dhatabhesi inobatwa neOccentus Networks (EU)
  6. Kodzero: Panguva ipi neipi iwe unogona kudzora, kupora uye kudzima ruzivo rwako

  1.   Pablo akadaro

    Uye chaizvo iyo cookie yakaiswa sei?