Muva nje Abathuthukisi beGoogle bamemezele inhloso yabo eminyakeni emibili ezayo ukumisa ngokuphelele ukusekelwa kwe-Chrome kwamakhukhi wenkampani yangaphandle kusungulwe lapho kufinyelelwa kumasayithi ngaphandle kwesizinda sekhasi lamanje njengoba lawa makhukhi asetshenziselwa ukulandelela ukunyakaza komsebenzisi phakathi kwamasayithi ekhodi yamanethiwekhi wokukhangisa, amawijethi wezokuxhumana nabantu nezinhlelo ze-web analytics.
Yilokho ukunyakaza okubuye kuhambisane, ne ucingo olwenziwe ngonjiniyela beChromium ezinkundleni zabo, ngoba banalo uhlose ukususa unhlokweni Womsebenzisi-Umenzeli kanye nokukhawulela ukufinyelela kwempahla ye-navigator.userAgent kuJavaScript.
Konke lokhu kungenxa yesinyathelo sobumfihlo seSandbox ngenhloso yokuthola ukuvumelana phakathi kwesidingo sokugcina imfihlo yomsebenzisi kanye nesifiso samanethiwekhi esikhangiso namasayithi ukulandelela okuthandwa yizivakashi.
Ekupheleni kwalo nyaka, kumodi yokuhlola ekuqaleni, ama-API angeziwe kulindeleke ukuthi afakwe esipheqululini ukukala ukuguqulwa nokwenza ngezifiso wokukhangisa ngaphandle kokusebenzisa amakhukhi avela eceleni.
Ukunquma isigaba sentshisekeloAbasebenzisi ngaphandle kokwenza umazisi ngamunye futhi ngaphandle kokubhekisela kumlando wokuvakashela amasayithi athile, Amanethiwekhi wesikhangiso amenyiwe ukuthi asebenzise i-Floc APIKanye nokuhlola umsebenzi womsebenzisi ngemuva kokushintshela ekukhangiseni, isilinganiso sokuguqulwa kwe-API nokuhlukanisa abasebenzisi ngaphandle kokusebenzisa okokuhlonza phakathi kwamasayithi aneToken API Trust.
Sisebenza ngenkuthalo kuyo yonke imvelo ukuze sinikeze iziphequluli, abashicileli, abathuthukisi, kanye nabakhangisi ithuba lokuzama lezi zinqubo ezintsha, bahlole ukuthi zisebenza kahle yini ezimweni ezahlukahlukene, futhi bathuthukise ukwenziwa kokusekelwa, kufaka phakathi ukuqondiswa kwezikhangiso nokukalwa, ukwenqatshelwa Kokuvinjelwa Kwensizakalo (DoS), i-antispam / ukukhwabanisa nokufakazela ubuqiniso obenziwe ndawonye.
Ukuthuthukiswa kokucaciswa okuhlobene nokuboniswa kokukhangisa okuhlosiwe ngaphandle kokwephula imfihlo kwenziwa iqembu elihlukile elenziwe yinhlangano ye-W3C.
Njengamanje, kumongo we ukuvikelwa ekudlulisweni kwamakhukhi ngesikhathi sokuhlaselwa kwe-CSRF, kusetshenziswa imfanelo yeSameSite okucaciswe kusihloko se-Set-Cookie, okuthi, njenge-Chrome 76, kusethwe ku- "SameSite = Lax" ngokuzenzakalela, okuvimba ukuthunyelwa kwamakhukhi kumasayithi wezinkampani zangaphandle, kepha amasayithi angasusa umkhawulo ngokubeka ngokusobala i-SameSite = None lapho ubeka ikhukhi.
Imfanelo ye-SameSite kungathatha amanani amabili we 'solid' noma 'lax'.
- Kumodi "eqinile", amakhukhi awathunyelwa noma yiluphi uhlobo lwesicelo esiphambene nendawo.
- Ngenkathi ikumodi 'eyekelele', kusebenza imikhawulo elula futhi ukudluliswa kwamakhukhi kuvinjelwe kuphela izicelo zesibili phakathi kwamasayithi, njengokucela isithombe noma ukulanda okuqukethwe nge-iframe.
Enguqulweni elandelayo ye I-Chrome 80 (ehlelelwe uFebhuwari 4) kuzosebenza umkhawulo Iqine ngokwengeziwe evimbela ukwenziwa kwamakhukhi wenkampani yangaphandle yezicelo ezingezona eze-HTTPS (ezinemfanelo SameSite = Azikho, amakhukhi angasethwa kuphela ngemodi ephephile).
Futhi, umsebenzi uyaqhubeka ekusetshenzisweni kwamathuluzi ukukhomba nokuvikela ekusetshenzisweni kokuhlonza okufihlekile nezindlela zokudlula ezokulandela ("izigxivizo zeminwe zesiphequluli").
KuFirefox kusuka kunguqulo 69, ngokuzenzakalela amakhukhi azitshwa yizo zonke izinhlelo zokulandela ngomkhondo ezivela eceleni.
I-Google ibona lokhu kuvinjelwa kufanele ukuvezwa kwezikhangiso.
Ngokuphendula ukuvimba amakhukhi ngaphandle kokunikeza enye indlela, amanethiwekhi wesikhangiso awazange ayeke ukulandela umkhondo, kepha aguqukele ekusebenziseni izindlela eziyinkimbinkimbi ngokususelwa ekuhlonzweni komsebenzisi okufihliwe (iminwe yeminwe) noma ukudala izizinda ezingezansi zethrekhi esizindeni sesiza lapho isikhangiso iyavezwa.
Umthombo: https://blog.chromium.org