Rust Core timu neMozilla vazivisa chinangwa chako chekugadzira iyo Rust Foundation, yakazvimiririra isingabatsiri purofiti pakupera kwegore, kune chivakwa chehungwaru chakabatana neiyo Rust chirongwa chichaendeswa, Zvinosanganisira zviratidzo zvekutengeserana nemazita echisimba ane hukama neRust, Cargo, uye crates.io.
Sangano ichave zvakare nebasa rekuronga chirongwa chemari. Rust uye Cargo zviratidzo zvekutenga zveMozilla isati yaendeswa kusangano idzva uye zvinoenderana nemitemo yekushandisa zvine mutsindo, izvo zvinounza mamwe matambudziko nekugoverwa kwemapakeji mukugovera.
Kunyanya mazwi ekushandisa Mozilla chiratidzo vanorambidza kuchengetwa kwezita reprojekiti kana paine shanduko kana zvigamba.
Kugovera kunogona kugovera zvakare pasuru inonzi Rust uye Cargo chete kana ikanyorwa kubva kune zvinyorwa zvekutanga; kana zvisina kudaro, mvumo yakanyorwa yakatarwa kubva kuchikwata cheRust Core kana zita shanduko rinodiwa.
Ichi chimiro chinokanganisa nekukurumidza kuzvimiririra kubviswa kwetsikidzi uye kushomeka mumapakeji neRust neCargo pasina kuenzanisa shanduko pamwe nekukwira kumusoro.
Rangarira izvozvo Ngura yakatanga kugadzirwa seprojekti kubva kuchikamu cheMozilla Research, iyo muna 2015 yakava yakazvimirira-yega chirongwa chine yakazvimirira manejimendi kubva kuMozilla.
Kunyangwe Rust yakachinja yakazvimiririra kubva ipapo, Mozilla yakapa rutsigiro rwemari uye rwemutemo. Izvi zviitiko zvino zvoendesa kusangano nyowani rakagadzirwa chaizvo kuti Rust's curation.
Sangano iri rinogona kuonekwa senzvimbo isina kwayakarerekera isiri yeMozilla, zvichiita kuti zvive nyore kukwezva makambani matsva kuti atsigire Rust uye kuwedzera kushanda kweprojekti.
Mutsva mibairo chirongwa
Chimwe chiziviso zvakaburitswa neMozilla ndeyekuti iri kuwedzera danho rayo kubhadhara mibairo yemari yekuona matambudziko ekuchengetedza muFirefox.
Pamusoro pekusagadzikana ivo pachavo, iyo Bug Bounty chirongwa ikozvino zvakare ichafukidza nzira dzekudzivirira maitiro inowanikwa mubrowser iyo inodzivirira zviitwa kubva mukushanda.
Maitiro aya anosanganisira sisitimu yekuchenesa zvidimbu zveHTML usati washandiswa mune yakasarudzika mamiriro, kugovana ndangariro kweDOM node uye Strings / ArrayBuffers, disavowing eval () mune mamiriro echirongwa uye mune yakakosha maitiro, ichimanikidza yakasimba CSP (Security Policy) zvirambidzo. zvemukati) ku iwo mapeji ebasa "nezve: gadziriso", iyo inorambidza kurodha kwemamwe mapeji kunze kwe "chrome: //", "zviwanikwa: //" uye "nezve:" muchiitiko chikuru, inorambidza kuitiswa kwekodhi JavaScript yekunze mune huru maitiro, kupfuudza rombo rakanaka rekugovana michina (inoshandiswa kugadzira iyo browser browser) uye isina-rombo rakanaka JavaScript kodhi
Cheki chakakanganikwa che eval () muWebhu Yevashandi tambo inopihwa semuenzaniso wechikanganiso icho chinokodzera kubhadharwa kwemubairo mutsva.
Kana njodzi ikaonekwa uye nzira dzekudzivirira dzakasiiwa kupokana nekushandisa, muongorori anogona kuwana imwe 50% yemubairo wepasi yakapihwa iyo yakatarwa kunetsekana (semuenzaniso, yeUXSS kudzvinyirira iyo inodarika iyo HTML Sanitizer mashandiro, zvichave zvinogoneka kutambira $ 7,000 pamwe neprimiyamu ye $ 3,500).
Kunyanya iko kuwedzera kwechirongwa mibairo yevanotsvaga vakazvimirira inoitika muchirevo chekudzingwa kwevashandi mazana maviri nemakumi mapfumbamwe kubva kuMozilla, iyo yaisanganisira iyo yese Yekutyisa Management Team inoona nezve kuongorora uye kuongorora zviitiko, pamwe nechikamu cheboka rekuchengetedza.
Uyewo, shanduko mumitemo yekushandisa chirongwa ichi chinotaurwa mubairo wekusasimba unowanikwa mukuvaka kwehusiku.
Izvo zvinofanirwa kucherechedzwa kuti hurema uhwu hunowanzo kuwanikwa nekukurumidza panguva yekugadzirisa otomatiki macheki mukati uye bvunzo dzekupenga.
Iyi mishumo yebug haigadzirise kuchengetedzeka kweFirefox kana nzira dzekuyedza dzinodzikisira, saka kuvaka kwehusiku kunozopihwa mubairo wekushupika kana nyaya yacho yanga irimo mune huru yekuchengetedza kwemazuva anopfuura mana uye isina kuzivikanwa nekuongororwa kwemukati nevashandi veMozilla.