Found 69 results for “service worker”
-
Firefox 74,為安全賦予更多價值
目前Firefox 74已經發布了。這次我們提供最重要的新功能是安全性的提升:特徵策略(Feature Policy),Cross-Origin-Resource-Policy標頭和移除TLS 1.0 / 1.1支援。我們還新增一些新的CSS文本屬性功能,JS鏈接運算符還有其他2D canvas文本度量標準功能,以及大量DevTools增強功能和錯誤修復功能。 本文同樣包含一些重點,你也可以在以下文章中閱讀新增功能的完整列表: Firefox 74開發人員專區 Firefox 74網頁相容性 Firefox 74終端用戶專區 提升安全性 讓我們看看74版本中安全性的改良。 特徵策略(Feature Policy) 我們終於在默認模式中啟用Feature Policy。你現在可以使用<iframe> allow屬性還有Feature-Policy HTTP標頭設定頂級文檔和iframe功能權限。語法範例如下: <iframe src="https://example.com" allow="fullscreen"></iframe> Feature-Policy: microphone 'none'; geolocation 'none' CORP 我們也啟用支援Cross-Origin-Resource-Policy (CORP)標頭,允許網站和應用程序因安全考量選擇拒絕針對某些跨域請求。例如:<script>和<img>元素。這也可以幫助減少潛在的旁路攻擊(例如Spectre和Meltdown)以及跨網站指令碼包含攻擊。 可用的屬性有same-origin和same-site。same-origin僅允許擁有相同scheme,host和port的請求讀取相關資源。這和網絡的默認同源協定相比,提供更高級的保護。same-site僅允許共享同一網站的請求。 可以將標頭依照以下範例運用CORP,例如: Cross-Origin-Resource-Policy: same-site 移除TLS 1.0 / 1.1 最後,Firefox 74為了提升整體Web平台的安全性,取消支援TLS 1.0 / 1.1。這對於推動TLS生態系統的發展很重要,同時也可以消除TLS 1.0 / 1.1導致的許多漏洞。這項功能沒有像我們希望的那麼有效,它們需要退場了。 2018年10月在Mozilla,Google,Microsoft和Apple的共同倡議下,首次宣布這項變更。2020年3月,我們現在都兌現了我們的諾言(蘋果公司除外,蘋果公司稍後將進行變更)。 結論是你要確保你的Web服務器支持TLS 1.2或1.3。請閱讀移除TLS 1.0 and 1.1更新了解如何測試和更新TLS […]
-
Security means more with Firefox 74
The release of Firefox 74 is focused on security enhancements: Feature Policy, the Cross-Origin-Resource-Policy header, and removal of TLS 1.0/1.1 support. We’ve also got some new CSS text property features, the JS optional chaining operator, and additional 2D canvas text metric features, along with the usual wealth of DevTools enhancements and bug fixes.
-
Future-proofing Firefox’s JavaScript Debugger Implementation
Optimizing the integration of Firefox Developer Tools with the SpiderMonkey JavaScript engine has resulted in many benefits, including the new asynchronous call stack tracking now available in Firefox Developer Edition. In this post you can learn how that was done, down to detailed changes to memory management.
-
Upcoming notification permission changes in Firefox 72
Earlier this year we decided to reduce the amount of unsolicited notification permission prompts people receive as they move around the web using the Firefox browser. This is an intrinsic part of Mozilla's commitment to putting people first when they are online. In preparation, we ran a series of studies and experiments to understand how to improve the user experience and reduce annoyance. Now we're making some changes to the workflow for how sites ask users for permission to send them notifications.
-
Firefox 67: Dark Mode CSS, WebRender, and more
Firefox 67 is now available in general release, bringing a faster and better JavaScript debugger, support for CSS
prefers-color-scheme
queries, and the initial debut of WebRender in stable Firefox. Dan Callahan walks through the highlights of browser, platform, and tooling features. -
Refactoring MDN macros with async, await, and Object.freeze()
In January, the MDN engineering team landed a major refactoring of the KumaScript codebase, the underlying Node server that runs macros in Kuma, which is the wiki that powers MDN. This work included some modern techniques of interest to JavaScript programmers.
-
Firefox 64 Released
The year's last release of Firefox bundles together goodies for all, including multi-tab management in the interface, new CSS features, devtools improvements, better privacy protections, add-ons updates, and much, much more. Read all about it!
-
Performance Updates and Hosting Moves: MDN Changelog for October 2018
This month's changelog, from the hard-working engineering team that builds and maintains the MDN Web Docs site, covers performance improvements and experiments, infrastructure updates, as well as countless tweaks and fixes to make your MDN experience better and better.
-
Payments, accessibility, and dead macros: MDN Changelog for September 2018
Changes and updates to the code, data, and tools that support MDN Web Docs. In September, the team launched MDN payments, improved MDN’s accessibility resources, and removed 15% of KumaScript macros. The team also shipped tweaks and fixes by merging 379 pull requests, including 66 pull requests from 38 new contributors.
-
MDN Changelog for August 2018
In August, the MDN content community reviewed and merged 85 Browser Compatibility Data pull requests. This month, we’ll continue working on new interactive examples, converting compatibility data, and migrating MDN services.