娴忚鍣ㄧ垎鍑轰弗閲嶆紡娲烇紝璋锋瓕銆佸井杞€丱pera鐢佃剳鐗堝拰瀹夊崜鐗堥兘鍙楀奖鍝?/h3>
2020-08-13

濡傛灉鎮ㄦ渶杩戝皻鏈皢chrome锛孫pera鎴朎dge缃戠粶娴忚鍣ㄦ洿鏂板埌鏈€鏂扮殑鍙敤鐗堟湰锛屽垯鏈€濂藉敖蹇繘琛屾洿鏂般€?/span>

缃戠粶瀹夊叏鐮旂┒浜哄憳鍛ㄤ竴鎶湶浜嗘湁鍏抽€傜敤浜嶹indows锛孧ac鍜孉ndroid鐨勫熀浜嶤hromium鐨刉eb娴忚鍣ㄩ浂鏃ユ紡娲炵殑璇︾粏淇℃伅锛岃婕忔礊鍙兘浣挎敾鍑昏€呰嚜chrome 73寮€濮嬪畬鍏ㄧ粫杩囧唴瀹瑰畨鍏ㄧ瓥鐣?csp)瑙勫垯銆?/span>

璺熻釜涓篊ve-2020-6519(cvss绛夌骇涓?.5)锛屾闂婧愪簬csp缁曡繃锛屽鑷寸洰鏍囩綉绔欎笂鎭舵剰浠ｇ爜鐨勪换鎰忔墽琛屻€?/span>

鏍规嵁perimeterx锛屼竴浜涘緢鍙楁杩庣殑缃戠珯锛屽寘鎷現acebook锛學ells fargo锛孼oom锛孏mail锛學hatsapp锛孖nvestopedia锛孍spn锛孯oblox锛孖ndeed锛孴iktok锛孖nstagram锛孊logger鍜孮uora锛岄兘瀹规槗鍙楀埌csp缁曡繃銆?/span>

鏈夎叮鐨勬槸锛岃吘璁畨鍏ㄧ巹姝﹀疄楠屽浼间箮鍦ㄤ竴骞村鍓嶄篃鍙戠幇浜嗙浉鍚岀殑婕忔礊锛岃窛2019骞?鏈圕hrome 73鍙戝竷浠呬竴涓湀锛屼絾鐩村埌perimeterx鍦ㄤ粖骞翠笁鏈堝垵鎶ュ憡姝ら棶棰樺悗鎵嶅緱浠ヨв鍐炽€?/span>

鍦ㄥ皢鍙戠幇淇℃伅鎶湶缁橤oogle涔嬪悗锛孋hrome鍥㈤槦鍙戝竷浜嗛拡瀵笴hrome 84鏇存柊(鐗堟湰84.0.4147.89)涓紡娲炵殑淇绋嬪簭锛岃鏇存柊浜庝笂涓湀鐨?鏈?4鏃ュ紑濮嬫帹鍑恒€?/span>

csp鏄畨鍏ㄦ€х殑棰濆涓€灞傦紝鍙府鍔╂娴嬪拰缂撹в鏌愪簺绫诲瀷鐨勬敾鍑伙紝鍖呮嫭璺ㄧ珯鐐硅剼鏈?xss)鍜屾暟鎹敞鍏ユ敾鍑汇€傚€熷姪csp瑙勫垯锛岀綉绔欏彲浠ヨ姹傚彈瀹宠€呯殑娴忚鍣ㄦ墽琛屾煇浜涘鎴风妫€鏌ワ紝浠ラ樆姝㈡棬鍦ㄥ埄鐢ㄦ祻瑙堝櫒淇′换浠庢湇鍔″櫒鎺ユ敹鐨勫唴瀹圭殑鐗瑰畾鑴氭湰銆?/span>

閴翠簬csp鏄綉绔欐墍鏈夎€呯敤鏉ュ疄鏂芥暟鎹畨鍏ㄧ瓥鐣ュ苟闃叉鎵ц鎭舵剰鑴氭湰鐨勪富瑕佹柟娉曪紝鍥犳csp缁曡繃鍙互鏈夋晥鍦颁娇鐢ㄦ埛鏁版嵁闈复椋庨櫓銆?/span>

杩欐槸閫氳繃鎸囧畾娴忚鍣ㄥ簲瑙嗕负鏈夋晥鐨勫彲鎵ц鑴氭湰婧愮殑鍩熸潵瀹炵幇鐨勶紝浠ヤ究涓嶤sp鍏煎鐨勬祻瑙堝櫒浠呮墽琛屼粠閭ｄ簺鍏佽鍒楀嚭鐨勫煙鎺ユ敹鐨勬簮鏂囦欢涓姞杞界殑鑴氭湰锛岃€屽拷鐣ユ墍鏈夊叾浠栧煙銆?/span>

鑵捐鍜孭erimeterx鍙戠幇鐨勬紡娲炰粎閫氳繃鍦℉tml iframe鍏冪礌鐨?ldquo; src”灞炴€т腑浼犻€掓伓鎰忕殑javascript浠ｇ爜鏉ョ粫杩囦负缃戠珯閰嶇疆鐨凜sp銆?/span>

鍊煎緱娉ㄦ剰鐨勬槸锛岀敱浜嶤sp绛栫暐鏄娇鐢ㄩ殢鏈烘暟鎴栧搱甯屽€兼潵鎵ц鍐呰仈鑴氭湰鐨勶紝鍥犳鏈彂鐜癟witter锛孏ithub锛孡inkedin锛孏oogle play store锛孻ahoo鐨凩ogin page锛孭aypal鍜孻andex绛夌綉绔欏鏄撳彈鍒版敾鍑汇€?/span>

“ chrome娴忚鍣ㄧ殑csp瀹炴柦鏈哄埗涓瓨鍦ㄦ紡娲炲苟涓嶇洿鎺ヨ〃绀虹綉绔欏凡琚牬鍧忥紝鍥犱负鏀诲嚮鑰呰繕闇€瑕佽娉曚粠璇ョ綉绔欒幏鍙栨伓鎰忚剼鏈?杩欏氨鏄负浠€涔堣婕忔礊琚綊涓轰腑绛変弗閲嶆€х殑鍘熷洜锛?rdquo;)perimeterxgal weizman鎸囧嚭銆?/span>

灏界璇ユ紡娲炵殑褰卞搷浠嶇劧鏈煡锛屼絾鐢ㄦ埛蹇呴』灏嗗叾娴忚鍣ㄦ洿鏂板埌鏈€鏂扮増鏈紝浠ラ槻姝㈡墽琛屾绫讳唬鐮併€傚缓璁綉绔欐墍鏈夎€呬娇鐢–sp鐨勯殢鏈烘暟鍜屽搱甯屽姛鑳芥潵澧炲己瀹夊叏鎬с€?/span>

闄ゆ涔嬪锛岄拡瀵筗indows锛孧ac鍜孡inux绯荤粺鐨勬渶鏂癈hrome鏇存柊84.0.4147.125杩樹慨琛ヤ簡15涓叾浠栧畨鍏ㄦ紡娲烇紝鍏朵腑12涓畨鍏ㄦ紡娲炵殑绛夌骇涓?ldquo;楂?rdquo;鍜?ldquo;浣?rdquo;銆?/span>

浣滆€咃細澧欏ご璇村畨鍏?鏉ユ簮锛?/span>浠婃棩澶存潯锛屽皝闈㈡簮鑷綉缁?

鏈珯绯绘湰缃戠紪杈戣浆杞斤紝杞浇鐩殑鍦ㄤ簬浼犻€掓洿澶氫俊鎭紝骞朵笉浠ｈ〃鏈綉璧炲悓鍏惰鐐瑰拰瀵瑰叾鐪熷疄鎬ц礋璐ｃ€傚娑夊強浣滃搧鍐呭銆佺増鏉冨拰鍏跺畠闂锛岃鍦?0鏃ュ唴涓庢湰缃戣仈绯伙紝鎴戜滑灏嗗湪绗竴鏃堕棿鍒犻櫎鍐呭锛乕澹版槑]鏈珯鏂囩珷鐗堟潈褰掑師浣滆€呮墍鏈?鍐呭涓轰綔鑰呬釜浜鸿鐐?鏈珯鍙彁渚涘弬鑰冨苟涓嶆瀯鎴愪换浣曟姇璧勫強搴旂敤寤鸿銆傛湰绔欐嫢鏈夊姝ゅ０鏄庣殑鏈€缁堣в閲婃潈銆?/span>

网站地图