diff --git a/docs/PATCHES.md b/docs/PATCHES.md index 778c60f8..acf5a95f 100644 --- a/docs/PATCHES.md +++ b/docs/PATCHES.md @@ -51,7 +51,7 @@ |**Android fonts fingerprinting mitigation**
Sat, 15 Feb 2025 16:25:31 +0000
File: [Android-fonts-fingerprinting-mitigation.patch](/build/patches/Android-fonts-fingerprinting-mitigation.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Replaces system fonts with a predefined set downloaded from www.cromite.org| |**Ask to restart on connection change**
Tue, 18 Jun 2024 15:31:12 +0000
File: [Ask-for-restart-on-connection-change.patch](/build/patches/Ask-for-restart-on-connection-change.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Experimental use of the OfflineDetector to identify network change, disabled by default.
If it is active, when the network change is detected by the android API,
the user is warned and asked to restart the browser.
Technically, blink's freeze mode is exploited, which allows javascript
execution and network calls to be blocked.
A preventive shutdown of all service workers is carried out, to inhibit the sending
of messages over the new ip, since the service workers have access
to the background fetch api.
The freeze and resume event of javascript is deliberately left, since the
page could deduct it in any case. In any case during the execution of
the javascript events, the page can only access the FetchLater api,
which is disabled by another patch.
The patch also changes the standard behaviour of the browser, allowing visible pages to freeze.
This could lead to the failure of some DCHECKS related to the handling of UI messages at unfreeze,
but since the goal is a reboot, this should not be the case.| |**AudioBuffer, AnalyserNode: fp mitigations**
Sun, 25 Mar 2018 21:49:37 +0200
File: [AudioBuffer-AnalyserNode-fp-mitigations.patch](/build/patches/AudioBuffer-AnalyserNode-fp-mitigations.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Truncate base latency precision to two digits| -|**Backport-v144-android-extensions-changes**
Thu, 6 Nov 2025 13:22:24 +0000
File: [Backport-v144-android-extensions-changes.patch](/build/patches/Backport-v144-android-extensions-changes.patch)
Author: uazo
Context:
License: |Enable support for anonymous browsing.
Backport of bugid 7089957 extensions Use BrowserWindowInterface in ExtensionViewHost
https://chromium-review.googlesource.com/c/chromium/src/+/7089957| +|**Backport-v144-android-extensions-changes**
Thu, 6 Nov 2025 13:22:24 +0000
File: [Backport-v144-android-extensions-changes.patch](/build/patches/Backport-v144-android-extensions-changes.patch)
Author: uazo
Context:
License: |Enable support for anonymous browsing.
Backport of bugid
7089957: extensions Use BrowserWindowInterface in ExtensionViewHost
https://chromium-review.googlesource.com/c/chromium/src/+/7089957
7126008: Destroy ExtensionWindowControllerBridge when its Profile is destroyed
https://chromium-review.googlesource.com/c/chromium/src/+/7126008| |**Battery API: return nothing**
Thu, 22 Mar 2018 22:11:57 +0100
File: [Battery-API-return-nothing.patch](/build/patches/Battery-API-return-nothing.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Include @thestinger's fix for correct charging/unknown values| |**Block Intents While Locked**
Tue, 31 Oct 2023 16:16:08 +0000
File: [Block-Intents-While-Locked.patch](/build/patches/Block-Intents-While-Locked.patch)
Author: Your
Context:
License: |see https://source.chromium.org/chromium/chromium/src/+/c5b50f4c2d42e7b808fd3e6fb3545cdb3f4d82c9| |**Block gateway attacks via websockets**
Tue, 28 Jul 2020 12:28:58 +0200
File: [Block-gateway-attacks-via-websockets.patch](/build/patches/Block-gateway-attacks-via-websockets.patch)
Author: csagan5
Context:
License: GPL-3.0-only |This approach is not comprehensive, see also:
* https://bugs.chromium.org/p/chromium/issues/detail?id=590714| @@ -264,6 +264,7 @@ |**Show NTP at startup**
Tue, 27 Feb 2024 16:20:43 +0000
File: [Show-NTP-at-startup.patch](/build/patches/Show-NTP-at-startup.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Adds an active option by default to automatically open the
NTP at each reboot and allows the user to continue the old browsing.
Until the real tab is opened, no data is retrieved.| |**Show site settings for cookies, javascript and ads**
Sat, 28 Dec 2019 10:23:04 +0100
File: [Show-site-settings-for-cookies-javascript-and-ads.patch](/build/patches/Show-site-settings-for-cookies-javascript-and-ads.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Avoid displaying info about intrusive ads| |**Site setting for images**
Tue, 5 Oct 2021 08:38:52 +0000
File: [Site-setting-for-images.patch](/build/patches/Site-setting-for-images.patch)
Author: uazo
Context:
License: GPL-3.0-only |Require: Content-settings-infrastructure.patch| +|**Supporting Dangling Ptr Detection via BackupRefPtr**
Thu, 11 Dec 2025 09:53:13 +0000
File: [Supporting-Dangling-Ptr-Detection-via-BackupRefPtr.patch](/build/patches/Supporting-Dangling-Ptr-Detection-via-BackupRefPtr.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Enable Dangling Ptr Detection (DPD) via BackupRefPtr (BRP) (disabled by default)
and additional safety checks that are too expensive to have on by default.
Enable checking raw_ptr do not become dangling during their lifetime.
Write a fixed cookie pattern at the end of each allocation to ensure there is no OOB write.
Enable MTE activation in Android for enabled devices (flag disabled by default)
BRP and MTE activate additional checks related to memory usage at the expense of
performance and increased memory usage, but guarantee the user that the browser
will not suffer from development errors related to memory management.| |**Switch to -fstack-protector-strong**
Wed, 26 Dec 2018 10:20:24 -0500
File: [Switch-to-fstack-protector-strong.patch](/build/patches/Switch-to-fstack-protector-strong.patch)
Author: Daniel
Context:
License: GPL-3.0-only |This compiler option is already used for ChromeOS, but not yet on other
platforms because there is push back against enabling an option resulting in
~1-2% lower performance and ~2-3% larger binaries.
The size increase on Android is something they care a lot about since some
devices have very little storage space. That also means ever so slightly
higher memory/cache usage but not by the full 2-3%.| |**TEMP Add a log to track strange behavior**
Fri, 19 May 2023 12:26:37 +0000
File: [TEMP-Add-a-log-to-track-strange-behavior.patch](/build/patches/TEMP-Add-a-log-to-track-strange-behavior.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || |**Temp PerformanceNavigationTiming privacy fix**
Wed, 11 Oct 2023 09:40:53 +0000
File: [Temp-PerformanceNavigationTiming-privacy-fix.patch](/build/patches/Temp-PerformanceNavigationTiming-privacy-fix.patch)
Author: uazo
Context:
License: GPL-2.0-or-later ||