diff --git a/docs/PATCHES.md b/docs/PATCHES.md index acf5a95f..d682591d 100644 --- a/docs/PATCHES.md +++ b/docs/PATCHES.md @@ -51,12 +51,10 @@ |**Android fonts fingerprinting mitigation**
Sat, 15 Feb 2025 16:25:31 +0000
File: [Android-fonts-fingerprinting-mitigation.patch](/build/patches/Android-fonts-fingerprinting-mitigation.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Replaces system fonts with a predefined set downloaded from www.cromite.org| |**Ask to restart on connection change**
Tue, 18 Jun 2024 15:31:12 +0000
File: [Ask-for-restart-on-connection-change.patch](/build/patches/Ask-for-restart-on-connection-change.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Experimental use of the OfflineDetector to identify network change, disabled by default.
If it is active, when the network change is detected by the android API,
the user is warned and asked to restart the browser.
Technically, blink's freeze mode is exploited, which allows javascript
execution and network calls to be blocked.
A preventive shutdown of all service workers is carried out, to inhibit the sending
of messages over the new ip, since the service workers have access
to the background fetch api.
The freeze and resume event of javascript is deliberately left, since the
page could deduct it in any case. In any case during the execution of
the javascript events, the page can only access the FetchLater api,
which is disabled by another patch.
The patch also changes the standard behaviour of the browser, allowing visible pages to freeze.
This could lead to the failure of some DCHECKS related to the handling of UI messages at unfreeze,
but since the goal is a reboot, this should not be the case.| |**AudioBuffer, AnalyserNode: fp mitigations**
Sun, 25 Mar 2018 21:49:37 +0200
File: [AudioBuffer-AnalyserNode-fp-mitigations.patch](/build/patches/AudioBuffer-AnalyserNode-fp-mitigations.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Truncate base latency precision to two digits| -|**Backport-v144-android-extensions-changes**
Thu, 6 Nov 2025 13:22:24 +0000
File: [Backport-v144-android-extensions-changes.patch](/build/patches/Backport-v144-android-extensions-changes.patch)
Author: uazo
Context:
License: |Enable support for anonymous browsing.
Backport of bugid
7089957: extensions Use BrowserWindowInterface in ExtensionViewHost
https://chromium-review.googlesource.com/c/chromium/src/+/7089957
7126008: Destroy ExtensionWindowControllerBridge when its Profile is destroyed
https://chromium-review.googlesource.com/c/chromium/src/+/7126008| |**Battery API: return nothing**
Thu, 22 Mar 2018 22:11:57 +0100
File: [Battery-API-return-nothing.patch](/build/patches/Battery-API-return-nothing.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Include @thestinger's fix for correct charging/unknown values| |**Block Intents While Locked**
Tue, 31 Oct 2023 16:16:08 +0000
File: [Block-Intents-While-Locked.patch](/build/patches/Block-Intents-While-Locked.patch)
Author: Your
Context:
License: |see https://source.chromium.org/chromium/chromium/src/+/c5b50f4c2d42e7b808fd3e6fb3545cdb3f4d82c9| |**Block gateway attacks via websockets**
Tue, 28 Jul 2020 12:28:58 +0200
File: [Block-gateway-attacks-via-websockets.patch](/build/patches/Block-gateway-attacks-via-websockets.patch)
Author: csagan5
Context:
License: GPL-3.0-only |This approach is not comprehensive, see also:
* https://bugs.chromium.org/p/chromium/issues/detail?id=590714| |**Block leakage of urls in sandbox iframes**
Sat, 21 Sep 2024 14:36:25 +0000
File: [Block-leakage-of-urls-in-sandbox-iframes.patch](/build/patches/Block-leakage-of-urls-in-sandbox-iframes.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Preventing url base fallback leakage in cross orgin sandbox iframe.
Addition of the ""block-url-leakage-sandbox-iframe" flag disabled by default.
DO NOT ACTIVATE: the patch is a wip
The aim is to understand whether it is possible to disable the
leakage of certain information in sandbox iframes| -|**Block qjz9zk or trk: requests**
Wed, 30 Oct 2019 11:50:13 +0100
File: [Block-qjz9zk-or-trk-requests.patch](/build/patches/Block-qjz9zk-or-trk-requests.patch)
Author: csagan5
Context:
License: GPL-3.0-only |An info bar is displayed unless the --disable-trkbar command-line flag or the chrome://flag option is used.
This patch is based on Iridium's 'net: add "trk:" scheme and help identify URLs being retrieved'| |**Bookmarks select all menu entry**
Sat, 9 Apr 2022 23:01:55 +0200
File: [Bookmarks-select-all-menu-entry.patch](/build/patches/Bookmarks-select-all-menu-entry.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Requires: Restore-BookmarkToolbar-setCurrentFolder.patch| |**Bromite auto updater**
Thu, 7 Oct 2021 14:27:12 +0000
File: [Bromite-auto-updater.patch](/build/patches/Bromite-auto-updater.patch)
Author: uazo
Context:
License: GPL-3.0-only |Enable checking for new versions, with notifications and proxy support.
Restore InlineUpdateFlow feature.
Some parts authored by csagan5.| |**Bromite package name**
Sat, 8 Jan 2022 19:42:34 +0100
File: [Bromite-package-name.patch](/build/patches/Bromite-package-name.patch)
Author: csagan5
Context:
License: GPL-3.0-only || @@ -107,6 +105,7 @@ |**Disable crash reporting**
Sat, 9 Apr 2022 21:43:35 +0200
File: [Disable-crash-reporting.patch](/build/patches/Disable-crash-reporting.patch)
Author: uazo
Context:
License: || |**Disable csp reports**
Sun, 26 Feb 2023 19:46:04 +0000
File: [Disable-csp-reports.patch](/build/patches/Disable-csp-reports.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || |**Disable css preferred text scale**
Sat, 28 Jun 2025 08:16:28 +0000
File: [Disable-css-preferred-text-scale.patch](/build/patches/Disable-css-preferred-text-scale.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Do not expose the user's preferred font scale to CSS.| +|**Disable device bound session**
Mon, 19 Jan 2026 12:00:34 +0000
File: [Disable-device-bound-session.patch](/build/patches/Disable-device-bound-session.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Disable DBSC due to potential privacy issues
see https://w3c.github.io/webappsec-dbsc/#privacy-considerations| |**Disable devtools remote and custom protocols**
Mon, 17 Apr 2023 12:38:44 +0000
File: [Disable-devtools-remote-and-custom-protocols.patch](/build/patches/Disable-devtools-remote-and-custom-protocols.patch)
Author: uazo
Context:
License: || |**Disable feeds support by default**
Thu, 19 Dec 2019 22:52:53 +0100
File: [Disable-feeds-support-by-default.patch](/build/patches/Disable-feeds-support-by-default.patch)
Author: csagan5
Context:
License: GPL-3.0-only || |**Disable fetching of all field trials**
Sun, 8 Jul 2018 18:16:34 +0200
File: [Disable-fetching-of-all-field-trials.patch](/build/patches/Disable-fetching-of-all-field-trials.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Disable seed-based field trials.
Disable reporting of Omnibox suggestions header.| @@ -140,7 +139,6 @@ |**Disallowing MIDI permission by default**
Sat, 3 Jun 2023 13:11:22 +0000
File: [Disallowing-MIDI-permission-by-default.patch](/build/patches/Disallowing-MIDI-permission-by-default.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || |**Do not block the build for incompatible profiles**
Wed, 2 Aug 2023 15:15:48 +0000
File: [do-not-block-build-incompatible-profiles.patch](/build/patches/do-not-block-build-incompatible-profiles.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || |**Do not build API keys infobar**
Fri, 23 Jul 2021 15:05:19 +0200
File: [Do-not-build-API-keys-infobar.patch](/build/patches/Do-not-build-API-keys-infobar.patch)
Author: csagan5
Context:
License: GPL-3.0-only || -|**Do not check for the presence of use_remoteexec**
Mon, 3 Mar 2025 12:04:53 +0000
File: [Do-not-check-for-the-presence-of-use-remoteexec.patch](/build/patches/Do-not-check-for-the-presence-of-use-remoteexec.patch)
Author: uazo
Context:
License: || |**Do not compile QR code sharing**
Thu, 27 Feb 2020 23:23:59 +0100
File: [Do-not-compile-QR-code-sharing.patch](/build/patches/Do-not-compile-QR-code-sharing.patch)
Author: csagan5
Context:
License: GPL-3.0-only || |**Do not ignore download location prompt setting**
Sun, 20 Jan 2019 06:20:10 +0100
File: [Do-not-ignore-download-location-prompt-setting.patch](/build/patches/Do-not-ignore-download-location-prompt-setting.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Upstream has decided that it works as intended (https://bugs.chromium.org/p/chromium/issues/detail?id=916606)
but users would like to decide where to save a file even when there is no SD card available;
do not skip the prompt in such cases.
Do not tick "Don't show again" by default| |**Do not link with libatomic**
Tue, 11 Jan 2022 13:59:32 +0000
File: [Do-not-link-with-libatomic.patch](/build/patches/Do-not-link-with-libatomic.patch)
Author: uazo
Context:
License: GPL-3.0-only |Compiler has built-in support thus libatomic linking is no more needed
This patch allows building with use_sysroot=false| @@ -178,7 +176,6 @@ |**Fix chromium build bugs**
Wed, 6 Sep 2023 17:55:01 +0000
File: [Fix-chromium-build-bugs.patch](/build/patches/Fix-chromium-build-bugs.patch)
Author: Your
Context:
License: |because of
https://bugs.chromium.org/p/chromium/issues/detail?id=1491776#c10| |**Fix chromium vanilla**
Fri, 2 Aug 2024 10:22:09 +0000
File: [Fix-chromium-vanilla.patch](/build/patches/Fix-chromium-vanilla.patch)
Author: uazo
Context:
License: |Fixes some crashes in start-up (only chromium vanilla)| |**Fix crash on customize profile ui**
Thu, 7 Sep 2023 06:15:28 +0000
File: [Fix-crash-on-customize-profile-ui.patch](/build/patches/Fix-crash-on-customize-profile-ui.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || -|**Follow only system dark mode**
Mon, 4 Jul 2022 16:14:37 +0300
File: [Follow-only-system-dark-mode.patch](/build/patches/Follow-only-system-dark-mode.patch)
Author: krlvm
Context:
License: GPL-3.0-only |Follow only system dark mode preference when theme is set to system default| |**Fonts fingerprinting mitigation**
Wed, 1 Mar 2023 15:37:55 +0000
File: [Fonts-fingerprinting-mitigation.patch](/build/patches/Fonts-fingerprinting-mitigation.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |The patch disables the use of non-standard fonts by blink,
used for device fingerprinting.
Access to local fonts and downloading fonts via Android
Downloadable Fonts API is disabled.
In windows, the patch exposes only fonts from the default
installation based on the user language exposed to the websites,
eliminating the ability to retrieve fonts handled differently
by gdi and directwrite.
It is possible to restore the original behavior via the
fonts-fingerprint-mitigation flag, which is active by default.| |**Force use vpython3 for some scripts**
Fri, 2 May 2025 14:16:01 +0000
File: [Force-use-vpython3-for-some-scripts.patch](/build/patches/Force-use-vpython3-for-some-scripts.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Some scripts need the latest version of python not available in the docker container.
The patch forces the use of python in the virtual environment in the version
required by the chromium build tools.| |**Guard for user-agent reduction**
Mon, 10 Feb 2020 23:13:13 +0100
File: [Guard-for-user-agent-reduction.patch](/build/patches/Guard-for-user-agent-reduction.patch)
Author: csagan5
Context:
License: GPL-3.0-only || @@ -195,6 +192,7 @@ |**Keep ComputePressure disabled**
Tue, 14 May 2024 15:33:59 +0000
File: [Keep-ComputePressure-disabled.patch](/build/patches/Keep-ComputePressure-disabled.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || |**Keep Manta Service Disabled**
Tue, 31 Oct 2023 16:20:12 +0000
File: [Keep-Manta-Service-Disabled.patch](/build/patches/Keep-Manta-Service-Disabled.patch)
Author: Your
Context:
License: || |**Keep Side Panel Companion disabled**
Mon, 17 Jul 2023 15:24:16 +0000
File: [Keep-Side-Panel-Companion-disabled.patch](/build/patches/Keep-Side-Panel-Companion-disabled.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || +|**Keep disabled CpuPerformance**
Mon, 19 Jan 2026 12:01:31 +0000
File: [Keep-disabled-CpuPerformance.patch](/build/patches/Keep-disabled-CpuPerformance.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Keep disabled CpuPerformance due to potential privacy issues
see https://github.com/explainers-by-googlers/cpu-performance?tab=readme-ov-file#accessibility-privacy-and-security-considerations| |**Keep disabled FetchLaterAPI**
Thu, 28 Sep 2023 08:11:00 +0000
File: [Keep-disabled-FetchLaterAPI.patch](/build/patches/Keep-disabled-FetchLaterAPI.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Disallow a network request to survive to context destoy.
For Request with active keepalive, if the request does not
start from the same origin.
It also inhibits the blocked request exception to javascript.| |**Keep disabled WebViewMediaIntegrityApi**
Wed, 22 May 2024 07:43:04 +0000
File: [Keep-disabled-WebViewMediaIntegrityApi.patch](/build/patches/Keep-disabled-WebViewMediaIntegrityApi.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Disables a new mechanism similar to Web Environment Integrity API in use in webviews
see https://issuetracker.google.com/issues/327186031
https://android-developers.googleblog.com/2023/11/increasing-trust-for-embedded-media.html
need: Add-cromite-flags-support.patch| |**Keep disabled cache sharing for pervasive scripts**
Sat, 28 Jun 2025 08:17:35 +0000
File: [Keep-disabled-cache-sharing-for-pervasive-scripts.patch](/build/patches/Keep-disabled-cache-sharing-for-pervasive-scripts.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Keeps disabled the new feature that allows bypassing the cache partition for specific urls.| @@ -267,7 +265,6 @@ |**Supporting Dangling Ptr Detection via BackupRefPtr**
Thu, 11 Dec 2025 09:53:13 +0000
File: [Supporting-Dangling-Ptr-Detection-via-BackupRefPtr.patch](/build/patches/Supporting-Dangling-Ptr-Detection-via-BackupRefPtr.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Enable Dangling Ptr Detection (DPD) via BackupRefPtr (BRP) (disabled by default)
and additional safety checks that are too expensive to have on by default.
Enable checking raw_ptr do not become dangling during their lifetime.
Write a fixed cookie pattern at the end of each allocation to ensure there is no OOB write.
Enable MTE activation in Android for enabled devices (flag disabled by default)
BRP and MTE activate additional checks related to memory usage at the expense of
performance and increased memory usage, but guarantee the user that the browser
will not suffer from development errors related to memory management.| |**Switch to -fstack-protector-strong**
Wed, 26 Dec 2018 10:20:24 -0500
File: [Switch-to-fstack-protector-strong.patch](/build/patches/Switch-to-fstack-protector-strong.patch)
Author: Daniel
Context:
License: GPL-3.0-only |This compiler option is already used for ChromeOS, but not yet on other
platforms because there is push back against enabling an option resulting in
~1-2% lower performance and ~2-3% larger binaries.
The size increase on Android is something they care a lot about since some
devices have very little storage space. That also means ever so slightly
higher memory/cache usage but not by the full 2-3%.| |**TEMP Add a log to track strange behavior**
Fri, 19 May 2023 12:26:37 +0000
File: [TEMP-Add-a-log-to-track-strange-behavior.patch](/build/patches/TEMP-Add-a-log-to-track-strange-behavior.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || -|**Temp PerformanceNavigationTiming privacy fix**
Wed, 11 Oct 2023 09:40:53 +0000
File: [Temp-PerformanceNavigationTiming-privacy-fix.patch](/build/patches/Temp-PerformanceNavigationTiming-privacy-fix.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || |**Temp disable UseContextSnapshot**
Tue, 1 Jul 2025 14:50:29 +0000
File: [Temp-disable-UseContextSnapshot.patch](/build/patches/Temp-disable-UseContextSnapshot.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Temporarily disable the context snapshot of blink and use that of v8.| |**Temp disable experimental-web-platform-features**
Mon, 2 Sep 2024 07:05:25 +0000
File: [Temp-disable-experimental-web-platform-features.patch](/build/patches/Temp-disable-experimental-web-platform-features.patch)
Author: uazo
Context:
License: || |**Temp disable predictive back gesture**
Sat, 12 Aug 2023 14:48:57 +0000
File: [Temp-disable-predictive-back-gesture.patch](/build/patches/Temp-disable-predictive-back-gesture.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || @@ -303,7 +300,6 @@ |**do not add suffix to package name**
Sat, 11 Jul 2020 15:00:13 +0200
File: [do-not-add-suffix-to-package-name.patch](/build/patches/do-not-add-suffix-to-package-name.patch)
Author: csagan5
Context:
License: GPL-3.0-only || |**do not hide .orig files**
Mon, 21 Jan 2019 09:17:05 +0100
File: [do-not-hide-.orig-files.patch](/build/patches/do-not-hide-.orig-files.patch)
Author: csagan5
Context:
License: GPL-3.0-only || |**enable -ftrivial-auto-var-init=zero**
Wed, 8 Apr 2020 20:48:17 -0400
File: [enable-ftrivial-auto-var-init-zero.patch](/build/patches/enable-ftrivial-auto-var-init-zero.patch)
Author: Daniel
Context:
License: GPL-3.0-only || -|**exit on failure of inclusion**
Fri, 6 Apr 2018 10:29:05 +0200
File: [exit-on-failure-of-inclusion.patch](/build/patches/exit-on-failure-of-inclusion.patch)
Author: csagan5
Context:
License: GPL-3.0-only || |**eyeo Browser Ad filtering Solution: Android API Module**
Fri, 14 Feb 2025 08:26:39 +0100
File: [eyeo-133.0.6943.49-android_api.patch](/build/patches/eyeo-133.0.6943.49-android_api.patch)
Author: chromium-sdk
Context:
License: |Based on Chromium 133.0.6943.49
Pre-requisites: eyeo Browser Ad filtering Solution: Base Module| |**eyeo Browser Ad filtering Solution: Android Settings UI Module**
Fri, 14 Feb 2025 08:26:40 +0100
File: [eyeo-133.0.6943.49-android_settings.patch](/build/patches/eyeo-133.0.6943.49-android_settings.patch)
Author: chromium-sdk
Context:
License: |Based on Chromium 133.0.6943.49
Pre-requisites: eyeo Browser Ad filtering Solution: Base Module and Android API Module| |**eyeo Browser Ad filtering Solution: Base Module**
Fri, 14 Feb 2025 08:26:31 +0100
File: [eyeo-133.0.6943.49-base.patch](/build/patches/eyeo-133.0.6943.49-base.patch)
Author: chromium-sdk
Context:
License: |Based on Chromium 133.0.6943.49|