Ithimba leRust Core neMozilla bamemezele inhloso yakho yokwakha IRust Foundation, inhlangano ezimele engenzi nzuzo ekupheleni konyaka, okuya kuwo impahla yengqondo ehlotshaniswa nomsebenzi weRust izodluliselwa, kufaka phakathi izimpawu zokuhweba namagama wesizinda ahlobene neRust, Cargo, namakesi.io.
Inhlangano izophinde ibe nesibopho sokuhlela ukuxhaswa ngezimali kwephrojekthi. URust and Cargo yizimpawu zokuhweba eziphethwe yiMozilla ngaphambi kokudluliselwa enhlanganweni entsha futhi zingaphansi kwemikhawulo yokusebenzisa ngokuqinile, edala ubunzima obuthile ngokusatshalaliswa kwamaphakeji ekusatshalalisweni.
Ikakhulu Imigomo Yokusebenzisa Uphawu lokuhweba lweMozilla zivimbela ukugcinwa kwegama lephrojekthi uma kwenzeka kuba nezinguquko noma amachashazi.
Ukusatshalaliswa kungasabalalisa kabusha iphakethe elibizwa ngokuthi iRust and Cargo kuphela uma lihlanganiswe lisuka kwimithombo yokuqala; ngaphandle kwalokho, kudingeka imvume ebhaliwe ngaphambi kwethimba leRust Core noma ushintsho lwegama.
Lesi sici siphazamisa ukususwa okuzimele okusheshayo kwezimbungulu nokuba sengozini kumaphakeji aneRust neCargo ngaphandle kokuxhumanisa izinguquko nomfula.
Khumbula lokho Ukugqwala kwasungulwa ekuqaleni njengephrojekthi kusuka esigabeni Sokucwaninga seMozilla, okwathi ngo-2015 yaguqulwa yaba iphrojekthi ezimele ngabaphathi abazimele abavela eMozilla.
Yize iRust yathuthuka ngokuzimela kusukela lapho, iMozilla inikeze ukuxhaswa kwezezimali nezomthetho. Le misebenzi manje izodlulisela enhlanganweni entsha eyenzelwe ngokukhethekile ukuphathwa kukaRust.
Le nhlangano ingabukwa njengesiza esingathathi hlangothi esingeyona iMozilla, okwenza kube lula ukuheha izinkampani ezintsha ukuxhasa ukugqwala nokukhulisa ukusebenza kwephrojekthi.
Uhlelo olusha lwemivuzo
Esinye isikhangiso lokho okukhishwe yiMozilla ukuthi ikhulisa isinyathelo sayo sokukhokha imivuzo yemali ngokuhlonza izinkinga zokuphepha kuFirefox.
Ngaphezu kobuthakathaka uqobo, uhlelo lwe-Bug Bounty manje futhi izofaka izindlela zokugwema izindlela itholakala kusiphequluli esivimbela ukuxhashazwa ekusebenzeni.
Lezi zindlela zifaka phakathi uhlelo lokuhlanza izingcezu ze-HTML ngaphambi kokusetshenziswa kumongo olilungelo, ukwaba inkumbulo yama-DOM node kanye ne-Strings / ArrayBuffers, i-disavowing eval () kumongo wohlelo nasenqubeni enkulu, ukuphoqelela imikhawulo eqinile ye-CSP (Security Policy) okuqukethwe. amakhasi esevisi "about: config", anqabela ukulayishwa kwamakhasi ngaphandle kwe- "chrome: //", "resource: //" kanye ne- "about:" enqubweni enkulu, kuvimbela ukwenziwa kwekhodi kweJavaScript yangaphandle enqubeni enkulu, ngokudlula izindlela zokwabelana ezinelungelo (ezisetshenziselwa ukudala isikhombimsebenzisi sesiphequluli) nekhodi ye-JavaScript engenamalungelo.
Isheke elikhohliwe le- eval () ezintanjeni zeWeb Worker linikezwa njengesibonelo sephutha elifanele ukukhokhelwa komvuzo omusha.
Uma kutholakala ukuba sengozini nezindlela zokuvikela azishiywanga ngokumelene nokuxhashazwa, umphenyi angathola enye i-50% yomvuzo oyisisekelo iklonyeliswe ngobungozi obukhonjiwe (ngokwesibonelo, ngokuba sengozini kwe-UXSS okudlula indlela ye-HTML Sanitizer, kuzokwazi ukuthola u- $ 7,000 kanye ne-premium ye $ 3,500).
Ikakhulu ukunwetshwa kohlelo lwemivuzo kubaphenyi abazimele kwenzeka kumongo wokuxoshwa kwakamuva kwabasebenzi abangama-250 kusuka eMozilla, ebifaka lonke Ithimba Lokuphathwa Kwezinsizi elibhekele ukuthola nokuhlaziya izehlakalo, kanye nengxenye yethimba lezokuphepha.
Futhi, kubikwa ushintsho emithethweni yokusebenzisa lolu hlelo umvuzo wokuba sengozini okhonjiwe ekwakhiweni ebusuku
Kumele kuqashelwe ukuthi lobu bucayi buvame ukutholakala ngokushesha ngesikhathi senqubo yokuhlola okuzenzakalelayo kwangaphakathi nokuhlolwa okungahambi kahle.
Le mibiko yeziphazamisi ayikuthuthukisi ukuphepha kweFirefox noma izindlela zokuhlola ezingekho emthethweni, ngakho-ke ukwakha ebusuku kuzoklonyeliswa kuphela ngokuba sengozini uma inkinga ibikhona enqolobaneni enkulu izinsuku ezingaphezu kwezingu-4 futhi ingakhonjwanga ngokubuyekezwa kwangaphakathi nabasebenzi beMozilla.