Kungekudala Abaphuhlisi bakaGoogle babhengeze iinjongo zabo kule minyaka mibini izayo ukurhoxisa ngokupheleleyo inkxaso yeChannel yee-cookies zomntu wesithathu esekwe xa kufikelelwa kwiziza ezingezizo ezedomeyini zephepha langoku njengoko ezi kuki zisetyenziselwa ukulandelela iintshukumo zomsebenzisi phakathi kweendawo ezikwikhowudi yothungelwano lwentengiso, iiwijethi zemidiya yoluntu kunye neenkqubo zokuhlaziya iwebhu.
Oku intshukumo nayo ehamba ngesandla, kunye umnxeba owenziwe ngabaphuhlisi beChromium kwiiforamu zabo, kuba banazo unomdla wokususa i-Header-Agent header kunye nokuthintela ukufikelela kwipropathi ye-navigator.userAgent kwiJavaScript.
Ixesha ledinga elingagqibekanga oku kungenxa yephulo labucala leSandbox Ngenjongo yokufikelela kwisivumelwano phakathi kwesidingo sokugcina imfihlo yomsebenzisi kunye nomnqweno wenethiwekhi yentengiso kunye neesayithi zokulandela umkhondo wokhetho lweendwendwe.
Ukuphela kwalo nyaka, kwimo yovavanyo ekuqaleni, ii-API ezongezelelweyo kulindeleke ukuba zibandakanywe kwisikhangeli ukulinganisa ukuguqulwa kunye nokwenza ubuqu wentengiso ngaphandle kokusebenzisa ii-cookies zomntu wesithathu.
Ukuchonga udidi lomdlaAbasebenzisi ngaphandle kokwenza uchazo lomntu kwaye ngaphandle kokubhekisa kwimbali yokundwendwela iisayithi ezithile, Iinethiwekhi zentengiso ziyamenywa ukuba zisebenzise i-Floc APIkunye nokuvavanya umsebenzi womsebenzisi emva kokutshintshela kwintengiso, imilinganiselo yokuguqulwa kwe-API kunye nokwahlula abasebenzisi ngaphandle kokusebenzisa izikhombisi phakathi kweendawo ezineToken API Trust.
Sisebenza ngenkuthalo kwindalo iphela ukuze sinike izikhangeli, abapapashi, abaphuhlisi, kunye nabathengisi ithuba lokuzama ezi ndlela zintsha, ukuvavanya ukuba zisebenza kakuhle kwiimeko ezahlukeneyo, kwaye baphuhlise ukwenziwa kwenkxaso, kubandakanya ukujolisa kwintengiso kunye nomlinganiso, ukwala ukuthintela inkonzo (DoS), antispam / ubuqhetseba kunye nokuqinisekiswa okuhlanganisiweyo.
Ukuphuhliswa kweenkcukacha ezinxulumene nokubonisa intengiso ekujoliswe kuyo ngaphandle kokophula imfihlo kwenziwa liqela elizimeleyo elisebenzayo elenziwe ngumbutho weW3C.
Okwangoku, kwimeko ye Ukukhuselwa ekuhanjisweni kweicookies ngexesha lokuhlaselwa kwe-CSRF, uphawu lweSameSite luyasetyenziswa icaciswe kwi-Set-Cookie header, ethi, njenge-Chrome 76, isetelwe "SameSite = Lax" ngokungagqibekanga, ethintela ukuthunyelwa kweicookies kwiindawo zangaphandle, kodwa iisayithi zinokususa isithintelo ngokumisela ngokucacileyo iSameSite = Akukho ukuseta ikuki.
Uphawu lweSameSite ungathatha amaxabiso amabini 'ngokungqongqo' okanye 'lax'.
- Kwindlela "engqongqo", ii-cookies azithunyelwanga naluphi na uhlobo lwesicelo esinqamlezayo.
- Ngelixa ikwi "lax", kuthintelwa ukukhanya kwaye ukuhanjiswa kweicookies kuthintelwe kuphela kwizicelo eziziisekondari phakathi kweesayithi, njengokucela umfanekiso okanye ukukhuphela umxholo ngeframe.
Kwinguqulelo elandelayo ye Chrome 80 (ecwangciselwe uFebruwari 4) kuya kusetyenziswa isithintelo Ngqongqo ngakumbi ukuthintela ukwenziwa kwe-cookies yomntu wesithathu yezicelo ngaphandle kwe-HTTPS (enophawu lweSameSite = Akukho, iicookies zinokuseta kuphela kwimowudi ekhuselekileyo).
Kwakhona, Umsebenzi uyaqhubeka ekuphunyezweni kwezixhobo Ukuchonga nokukhusela ekusetyenzisweni kwesazisi esifihlakeleyo kunye neendlela zokulandela umkhondo ("iminwe yesikhangeli").
KwiFirefox esuka kuguqulelo 69, ngokungagqibekanga ii-cookies azihoywa zizo zonke iinkqubo zomkhondo wesithathu.
UGoogle ulujonga olu vimba njengoluchanekileyo, kodwa ifuna ukulungiswa kwangaphambili kwendalo yewebhu kunye nokubonelelwa ngezinye ii-API ukusombulula imisebenzi ezazisetyenziselwa iikuki zomntu wesithathu ngaphambili, ngaphandle kokophula imfihlo kwaye ngaphandle kokujongela phantsi iimodeli zokwenza imali zeendawo ezixhaswa ngemali umboniso wentengiso.
Ukuphendula ukuvimba iicookies ngaphandle kokubonelela ngenye indlela, iinethiwekhi zentengiso azizange ziyeke ukulandela umkhondo, kodwa zitshintshele ekusebenziseni iindlela ezintsonkothileyo ezisekwe kukuchongwa komsebenzisi okufihliweyo (iminwe yeminwe) okanye ukwenza iindawo ezingaphantsi ezizodwa zomkhondo kwindawo yesiza apho intengiso iye iyaboniswa.
Umthombo: https://blog.chromium.org