From 26150834a47e91cbf8abd8a2c9e4d243922dceeb Mon Sep 17 00:00:00 2001 From: uazo <29201891+uazo@users.noreply.github.com> Date: Thu, 26 Sep 2024 08:16:11 +0000 Subject: [PATCH] [AUTO][DOC] Generate patches doc for master branch --- docs/PATCHES.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/docs/PATCHES.md b/docs/PATCHES.md index 3b347855..115badb3 100644 --- a/docs/PATCHES.md +++ b/docs/PATCHES.md @@ -52,6 +52,7 @@ |**Battery API: return nothing**
Thu, 22 Mar 2018 22:11:57 +0100
File: [Battery-API-return-nothing.patch](/build/patches/Battery-API-return-nothing.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Include @thestinger's fix for correct charging/unknown values| |**Block Intents While Locked**
Tue, 31 Oct 2023 16:16:08 +0000
File: [Block-Intents-While-Locked.patch](/build/patches/Block-Intents-While-Locked.patch)
Author: Your
Context:
License: |see https://source.chromium.org/chromium/chromium/src/+/c5b50f4c2d42e7b808fd3e6fb3545cdb3f4d82c9| |**Block gateway attacks via websockets**
Tue, 28 Jul 2020 12:28:58 +0200
File: [Block-gateway-attacks-via-websockets.patch](/build/patches/Block-gateway-attacks-via-websockets.patch)
Author: csagan5
Context:
License: GPL-3.0-only |This approach is not comprehensive, see also:
* https://bugs.chromium.org/p/chromium/issues/detail?id=590714| +|**Block leakage of urls in sandbox iframes**
Sat, 21 Sep 2024 14:36:25 +0000
File: [Block-leakage-of-urls-in-sandbox-iframes.patch](/build/patches/Block-leakage-of-urls-in-sandbox-iframes.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Preventing url base fallback leakage in cross orgin sandbox iframe.
Addition of the ""block-url-leakage-sandbox-iframe" flag disabled by default.
DO NOT ACTIVATE: the patch is a wip
The aim is to understand whether it is possible to disable the
leakage of certain information in sandbox iframes| |**Block qjz9zk or trk: requests**
Wed, 30 Oct 2019 11:50:13 +0100
File: [Block-qjz9zk-or-trk-requests.patch](/build/patches/Block-qjz9zk-or-trk-requests.patch)
Author: csagan5
Context:
License: GPL-3.0-only |An info bar is displayed unless the --disable-trkbar command-line flag or the chrome://flag option is used.
This patch is based on Iridium's 'net: add "trk:" scheme and help identify URLs being retrieved'| |**Bookmarks select all menu entry**
Sat, 9 Apr 2022 23:01:55 +0200
File: [Bookmarks-select-all-menu-entry.patch](/build/patches/Bookmarks-select-all-menu-entry.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Requires: Restore-BookmarkToolbar-setCurrentFolder.patch| |**Bromite auto updater**
Thu, 7 Oct 2021 14:27:12 +0000
File: [Bromite-auto-updater.patch](/build/patches/Bromite-auto-updater.patch)
Author: uazo
Context:
License: GPL-3.0-only |Enable checking for new versions, with notifications and proxy support.
Restore InlineUpdateFlow feature.
Some parts authored by csagan5.| @@ -66,6 +67,7 @@ |**Compress libchrome to free up some space**
Wed, 19 Jul 2023 09:32:36 +0000
File: [Compress-libchrome-to-free-up-some-space.patch](/build/patches/Compress-libchrome-to-free-up-some-space.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |upstream removed ModernLinker support for developer build (apk releases).
see https://bugs.chromium.org/p/chromium/issues/detail?id=1383210| |**Content settings infrastructure**
Thu, 24 Feb 2022 07:54:36 +0000
File: [Content-settings-infrastructure.patch](/build/patches/Content-settings-infrastructure.patch)
Author: uazo
Context:
License: GPL-3.0-only |This patch is used by other patches to provide the UI for Bromite-specific
site settings.
See BromiteCustomContentSetting_README.md for more information.
Require: bromite-build-utils.patch| |**Cromite Branding**
Wed, 19 Jul 2023 12:37:39 +0000
File: [Cromite-Branding.patch](/build/patches/Cromite-Branding.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || +|**Cromite Branding: improve settings ui**
Sat, 21 Sep 2024 15:32:02 +0000
File: [Cromite-Branding--improve-settings-ui.patch](/build/patches/Cromite-Branding--improve-settings-ui.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Modification to the settings ui with the aim of making it clearer.| |**Customize selection popup**
Sun, 7 Jan 2024 15:46:46 +0000
File: [Customize-selection-popup.patch](/build/patches/Customize-selection-popup.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Adds options related to the handling of pop-up selections:
Opens tabs in foreground, Move web search to the top of items,
Web search in tab group and Enable smart text selection| |**Deprecate Data URL in SVGUseElement**
Mon, 5 Jun 2023 17:02:33 +0000
File: [Deprecate-Data-URL-in-SVGUseElement.patch](/build/patches/Deprecate-Data-URL-in-SVGUseElement.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || |**Dictionary suggestions for the Omnibox**
Sat, 19 Mar 2022 10:53:24 +0100
File: [Dictionary-suggestions-for-the-Omnibox.patch](/build/patches/Dictionary-suggestions-for-the-Omnibox.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Revert "Disable Dictionary suggestions for the Omnibox"
This reverts commit d3ec2b2d25066ec089f8351a44b919ded4270e83.| @@ -138,6 +140,7 @@ |**Enable -fwrapv in Clang for non-UBSan builds**
Thu, 22 Dec 2016 07:15:34 -0500
File: [Enable-fwrapv-in-Clang-for-non-UBSan-builds.patch](/build/patches/Enable-fwrapv-in-Clang-for-non-UBSan-builds.patch)
Author: Daniel
Context:
License: GPL-3.0-only |Using -fwrapv (notably only when not using signed integer overflow checking -
since it will override it and result in not performing checks) is just common
sense since it eliminates the chance of security vulnerabilities being
introduced by optimizations based on signed overflow being undefined.
That has happened before, and those optimizations don't even add up to a 0.1%
performance increase for this kind of software. It's not worth having.
The Linux kernel passes -fwrapv and also -fno-strict-aliasing to disable those
dangerous optimizations (since there is so much incorrect code they can break).
In fact, it is easy to point to dozens of known examples of invalid code that
could potentially be broken by those optimizations.
It is not acceptable for projects to be using optimizations that are known to
be broken with a bunch of code in their tree.
They put barely any effort into even fixing the known cases.
Chromium has blacklists for UBSan for 'false positives' (none of which are
actually false positives, but rather "undefined, but not a bug beyond
potentially being broken by optimizations or even code generation without
them") and also for components too full of these bugs for them to currently
want to bother with it. That includes a bunch of signed overflow issues
(there is sadly no detection for aliasing violations, which are fairly common,
but not that common).
Ideally, -fwrapv could be always passed, but unfortunately the way it is
implemented has silly interactions with other switches.
The reason it would still make sense to pass it is because due to their UBSan
blacklists, they get far from full coverage with it, so -fwrapv would still
be better than nothing where it's not being used.
Since -fwrapv makes signed integer overflow well-defined, Clang will disable
the UBSan checks for signed integer overflow, including in the
production-oriented trapping mode used for hardening.
Excerpt from https://github.com/bromite/bromite/issues/226| |**Enable Android Dynamic Performance Framework**
Wed, 23 Aug 2023 13:49:19 +0000
File: [Enable-Android-Dynamic-Performance-Framework.patch](/build/patches/Enable-Android-Dynamic-Performance-Framework.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || |**Enable Certificate Transparency**
Fri, 10 Jun 2022 14:20:02 +0200
File: [Enable-Certificate-Transparency.patch](/build/patches/Enable-Certificate-Transparency.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Reporting/auditing functionalities are disabled; a flag is exposed.
Add guard to make sure that certificate transparency stays enabled
by default.| +|**Enable ClickToCall**
Sat, 21 Sep 2024 14:38:40 +0000
File: [Enable-ClickToCall.patch](/build/patches/Enable-ClickToCall.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Reactivation of the "click-to-call" flag and activation by default.
The functionality is only active if sending Intents from the web is allowed| |**Enable Do-Not-Track by default**
Wed, 29 May 2024 13:49:01 +0000
File: [Enable-Do-Not-Track-by-default.patch](/build/patches/Enable-Do-Not-Track-by-default.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || |**Enable Document Open Inheritance Removal**
Tue, 28 Mar 2023 15:43:18 +0000
File: [Enable-Document-Open-Inheritance-Removal.patch](/build/patches/Enable-Document-Open-Inheritance-Removal.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || |**Enable Global Privacy Control**
Wed, 29 May 2024 13:43:50 +0000
File: [Enable-Global-Privacy-Control.patch](/build/patches/Enable-Global-Privacy-Control.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || @@ -209,7 +212,6 @@ |**Reduce HTTP headers in DoH requests to bare minimum**
Sat, 28 Apr 2018 08:30:26 +0200
File: [Reduce-HTTP-headers-in-DoH-requests-to-bare-minimum.patch](/build/patches/Reduce-HTTP-headers-in-DoH-requests-to-bare-minimum.patch)
Author: csagan5
Context:
License: GPL-3.0-only || |**Remove ChromiumNetworkAdapter**
Sat, 15 Apr 2023 11:46:48 +0000
File: [Remove-ChromiumNetworkAdapter.patch](/build/patches/Remove-ChromiumNetworkAdapter.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Removes from java code the ability to make http connections
without asking the native code| |**Remove EV certificates**
Thu, 2 Apr 2015 12:44:23 +0200
File: [Remove-EV-certificates.patch](/build/patches/Remove-EV-certificates.patch)
Author: Jan
Context:
License: GPL-3.0-only |The team chose to let EV certificates appear just like normal
certificates. The web of trust is considered a failure in itself, so
do not give users a false sense of extra security with EV certs.
Instead, let them appear just like regular ones.| -|**Remove GoogleAccountsPrivateApiHost**
Tue, 5 Sep 2023 12:55:40 +0000
File: [Remove-GoogleAccountsPrivateApiHost.patch](/build/patches/Remove-GoogleAccountsPrivateApiHost.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || |**Remove HTTP referrals in cross origin navigation**
Wed, 21 Sep 2022 12:28:17 +0000
File: [Remove-HTTP-referrals-in-cross-origin-navigation.patch](/build/patches/Remove-HTTP-referrals-in-cross-origin-navigation.patch)
Author: uazo
Context:
License: GPL-3.0-only |The patch removes the referrals if the navigation is cross-origin and occurs in the top frame.
The value is not removed across iframes because the referrals are statically defined
by the HTML and the Javascript of the page, and therefore they do not tell anything about the
user. Also, some services may not work, such as video iframes.
A preference is also introduced to completely removes referrals management, for advanced users.| |**Remove SMS integration**
Sun, 3 Nov 2019 08:22:29 +0100
File: [Remove-SMS-integration.patch](/build/patches/Remove-SMS-integration.patch)
Author: csagan5
Context:
License: GPL-3.0-only || |**Remove auth header upon cross origin redirect**
Wed, 19 Apr 2023 06:53:19 +0000
File: [Remove-auth-header-upon-cross-origin-redirect.patch](/build/patches/Remove-auth-header-upon-cross-origin-redirect.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || @@ -220,6 +222,7 @@ |**Remove navigator.connection info**
Thu, 14 Jul 2022 09:48:45 +0000
File: [Remove-navigator.connection-info.patch](/build/patches/Remove-navigator.connection-info.patch)
Author: uazo
Context:
License: GPL-3.0-only |Change the result of navigator.connection to default values
and disable observers| |**Remove preload of com.google.android.gms.fonts**
Wed, 6 Jul 2022 09:37:25 +0000
File: [Remove-preload-of-com.google.android.gms.fonts.patch](/build/patches/Remove-preload-of-com.google.android.gms.fonts.patch)
Author: uazo
Context:
License: GPL-3.0-only || |**Remove segmentation platform**
Thu, 9 Jun 2022 19:45:03 +0000
File: [Remove-segmentation-platform.patch](/build/patches/Remove-segmentation-platform.patch)
Author: uazo
Context:
License: GPL-3.0-only |Also fixes a crash on startup.| +|**Remove sideloading of version.dll**
Sun, 15 Sep 2024 09:41:40 +0000
File: [Remove-sideloading-of-version-dll.patch](/build/patches/Remove-sideloading-of-version-dll.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Disabling support for local version.dll loading in windows| |**Remove support for device memory and cpu recovery**
Tue, 27 Jun 2023 11:11:53 +0000
File: [Remove-support-for-device-memory-and-cpu-recovery.patch](/build/patches/Remove-support-for-device-memory-and-cpu-recovery.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || |**Remove voice recognition integration**
Sun, 19 Jun 2022 12:57:56 +0200
File: [Remove-voice-recognition-integration.patch](/build/patches/Remove-voice-recognition-integration.patch)
Author: csagan5
Context:
License: GPL-3.0-only || |**Remove window name on cross origin navigation**
Sat, 9 Jul 2022 06:59:18 +0000
File: [Remove-window-name-on-cross-origin-navigation.patch](/build/patches/Remove-window-name-on-cross-origin-navigation.patch)
Author: uazo
Context:
License: GPL-3.0-only |See also: https://trac.webkit.org/changeset/209076/webkit|