Ithimba Locwaningo Lokuba Sengozini KweMicrosoft Edge limemezele ezinsukwini ezimbalwa ezedlule ukuthi ukuzama ngomsebenzi omusha kusiphequluli. Ukuhlolwa kufaka phakathi ukukhubaza ngamabomu umhlanganisi we-JIT IJavaScript neWebAssembly, ngalokho uthola ukusebenza okukhulu nokwenza ngcono ukusebenza ukunika amandla izibuyekezo zokuphepha ezithuthuke kakhulu kulokho inkampani ekubiza nge-Edge Super Duper Mode Secure.
Inkampani yakuchaza lokho umqondo ukunciphisa indawo yokuhlasela yokuxhashazwa izinhlelo zesimanje ezincike emaphutheni weJavaScript futhi zikhuphula ngokumangazayo izindleko zokusebenza kwabahlaseli.
IMicrosoft ibalula ukuthi iChromium, nayo esuselwa enjinini yeJavaScript V8, injini yomthombo ovulekile, iza nomhlanganisi weJIT odlala indima ebaluleke kakhulu kuzo zonke iziphequluli zewebhu zamanje futhi esebenza ngokuthatha iJavaScript ayenze ikhodi yomshini kusengaphambili. okuthi uma isiphequluli sidinga le khodi, sizosheshiswa, uma singayidingi, ikhodi iyasuswa.
Lokho kushiwo, abathengisi besiphequluli bayavuma ukuthi ukwesekwa komhlanganisi we-JIT ku-V8 kuyinkimbinkimbi njengoba bambalwa kakhulu abantu abakuqondayo futhi kunendawo engezansi yephutha.
Ngokuya ngemininingwane ye-CVE eqoqwe kusukela ngo-2019, cishe ukukhubazeka okungaba ngu-45% okutholakale enjinini yeJavaScript nakuWebAssembly V8 bekuhlobene ne-JIT compiler, noma ngaphezu kwengxenye yabo bonke ubungozi ku-Chrome.
“Amawebhusayithi awadingi iJavaScript, okudingakalayo ukuthi kube yi-single page web applications enama-anti-templates njengokuncipha okungapheli. Uthola izinto ezimbili ngokubuyisela, i-super duper web esheshayo nesiphequluli sewebhu esiphephe kakhudlwana. Isibonelo, i-Amazon isekela kahle ukusetshenziswa ngaphandle kweJavaScript. Olunye uvivinyo yiStackoverflow, izinto ezinjengokubuka kuqala nokugqamisa azisebenzi. Ukugqamisa kungangezwa ngekhodi eseceleni, kepha kuzobiza isikhathi se-CPU, futhi akusona isikhathi sakho se-CPU. Ingabe isikhathi sakho se-CPU? »Sifunde kumazwana abekiwe.
Kungakho kukhuthazwa yile miphumela, ithimba le-Edge liyasebenza njengamanje kulokho iqembu leqiniso elingokoqobo elikubizayo "Imodi Ephephile Ye-Super Duper", ukumiswa kwe-Edge lapho ukhubaza khona umhlanganisi we-JIT futhi unike amandla ezinye izici ezintathu zokuphepha, kufaka phakathi ubuchwepheshe be-Intel's CET (ControlFlow-Enforcing Technology) nohlelo lwe-Windows ACG (Arbitrary Code Guard) - izici ezimbili ezingavame ukuphikisana nokusetshenziswa kwe-JIT V8 .
"Ngokukhubaza i-JIT compiler, singavumela ukunciphisa futhi senze kube nzima kakhulu ukusebenzisa izimbungulu zokuphepha kunoma iyiphi ingxenye yenqubo yokunikezela," wabhala. Lokhu kuncishiswa kwendawo yokuhlasela kubulala uhhafu wezimbungulu esizibonayo ekusetshenzisweni, lapho isiphazamisi ngasinye esisele siba nzima ukusizakala. Ukubeka ngenye indlela, sinciphisa izindleko zabasebenzisi, kodwa sandisa izindleko zabahlaseli. "
Nokho, Ukuhlolwa kweMicrosoft ithole ukuthi izinhlobo ze-Edge ngaphandle komhlanganisi we-JIT babenokwehliswa okungu-16,9% ngesikhathi sokulayisha sekhasi kanye nokwehla ngo-2,3% ekusetshenzisweni kwememori. Kepha lokhu kuhlolwa bekuyinto yokulinga futhi iSuper Duper Secure Mode (SDSM) ngeke ibe yingxenye yenguqulo esemthethweni yeMicrosoft Edge nganoma yisiphi isikhathi kungekudala.
Kodwa-ke, abasebenzisi abakhishwe ngaphambilini beMicrosoft Edge (kufaka phakathi i-Beta, i-Dev, ne-Canary) bangavumela i-SDSM emaphethelweni: // amafulegi / # onqenqemeni-vumela-imodi ephephile-evikelekile futhi inike amandla isici esisha.
Lezi zindaba ziza ngemuva nje kokuthi iMicrosoft Edge iveze izinketho eziningi ezintsha. Izinketho zokwenza kube ngokwakho zabasebenzisi, kufaka phakathi amandla okushintsha okufakwayo okuphathelene nemvume yokudlala kabusha imidiya kusiphequluli, kanye nokukwazi "ukucisha" izexwayiso zesimo sephasiwedi zewebhusayithi ethile. Vele, emphakathini, siyawazisa umzamo weMicrosoft wokwehlisa indawo yokuhlasela yabasebenzisi bokugcina abangazange bacele yonke iJavaScript ethunyelwa emakhasini ewebhu namuhla.
Okokugcina uma unesifiso sokwazi okwengeziwe mayelana, Ungahlola imininingwane kusixhumanisi esilandelayo.