diff --git a/docs/PATCHES.md b/docs/PATCHES.md index bb68c85c..647288a1 100644 --- a/docs/PATCHES.md +++ b/docs/PATCHES.md @@ -95,6 +95,7 @@ |**Disable Service and Shared workers on 3P iframe**
Sun, 5 Nov 2023 18:05:19 +0000
File: [Disable-Service-and-Shared-workers-on-3P-iframe.patch](/build/patches/Disable-Service-and-Shared-workers-on-3P-iframe.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Disabled by default due https://bugs.chromium.org/p/chromium/issues/detail?id=1147281
Workers can be reenabled per top-site-url using "Allow 3P Cookies"
("Block 3P Cookies" in ui to off) in site settings| |**Disable TLS resumption**
Thu, 24 Mar 2022 10:08:00 +0000
File: [Disable-TLS-resumption.patch](/build/patches/Disable-TLS-resumption.patch)
Author: uazo
Context:
License: GPL-3.0-only |Disable resumption feature for all HTTPS and QUIC connections;
the feature could be used to track users even without cookies.
Sessions are not currently saved to disk in Chromium (although
there is support for it) but are long enough to constitute a
privacy risk (2h for TLS 1.2 and 7 days for TLS 1.3) if user
does not frequently close the browser.
Since session information is not kept in the HTTP cache it is
not cleared when deleting navigation data (although it is possible
to clear it by selecting "passwords").
Two new user configurable flags are introduced:
* kDisableTLSResumption, active by default
* kLogTLSResumption, that would allow to find in logcat reused
sessions in lines matching "SSL Log:"
See also:
* https://arxiv.org/abs/1810.07304| |**Disable UA full version**
Wed, 16 Feb 2022 14:28:58 +0000
File: [Disable-UA-full-version.patch](/build/patches/Disable-UA-full-version.patch)
Author: uazo
Context:
License: GPL-3.0-only |getHighEntropyValues will return only the major version| +|**Disable Viewport Segments**
Sat, 28 Jun 2025 08:17:07 +0000
File: [Disable-Viewport-Segments.patch](/build/patches/Disable-Viewport-Segments.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Disable Viewport Segments API, specifically for foldable devices,
since it exposes the geometry of the fold.| |**Disable Web Bluetooth by default in desktop platforms**
Fri, 24 Jan 2025 14:32:14 +0000
File: [Disable-Web-Bluetooth-by-default-in-desktop-platforms.patch](/build/patches/Disable-Web-Bluetooth-by-default-in-desktop-platforms.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |On desktop platforms, disable Bluetooth by default and activate the user-manageable content setting ui.| |**Disable WebGPU**
Mon, 1 May 2023 12:07:49 +0000
File: [Disable-WebGPU.patch](/build/patches/Disable-WebGPU.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || |**Disable all predictors code**
Tue, 25 Jan 2022 12:22:52 +0000
File: [Disable-all-predictors-code.patch](/build/patches/Disable-all-predictors-code.patch)
Author: uazo
Context:
License: GPL-3.0-only || @@ -102,6 +103,7 @@ |**Disable conversion measurement api**
Mon, 15 Nov 2021 09:43:29 +0000
File: [Disable-conversion-measurement-api.patch](/build/patches/Disable-conversion-measurement-api.patch)
Author: uazo
Context:
License: GPL-3.0-only |Disable Conversion Measurement API by disabling the flag and removing
support for the AttributionReporting provider. it also removes
the handling of attributions via intents between apps.
This patch enforces the deactivation by preventing the report from
being sent and being saved to disk, although it is currently in uncalled code.| |**Disable crash reporting**
Sat, 9 Apr 2022 21:43:35 +0200
File: [Disable-crash-reporting.patch](/build/patches/Disable-crash-reporting.patch)
Author: uazo
Context:
License: || |**Disable csp reports**
Sun, 26 Feb 2023 19:46:04 +0000
File: [Disable-csp-reports.patch](/build/patches/Disable-csp-reports.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || +|**Disable css preferred text scale**
Sat, 28 Jun 2025 08:16:28 +0000
File: [Disable-css-preferred-text-scale.patch](/build/patches/Disable-css-preferred-text-scale.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Do not expose the user's preferred font scale to CSS.| |**Disable devtools remote and custom protocols**
Mon, 17 Apr 2023 12:38:44 +0000
File: [Disable-devtools-remote-and-custom-protocols.patch](/build/patches/Disable-devtools-remote-and-custom-protocols.patch)
Author: uazo
Context:
License: || |**Disable feeds support by default**
Thu, 19 Dec 2019 22:52:53 +0100
File: [Disable-feeds-support-by-default.patch](/build/patches/Disable-feeds-support-by-default.patch)
Author: csagan5
Context:
License: GPL-3.0-only || |**Disable fetching of all field trials**
Sun, 8 Jul 2018 18:16:34 +0200
File: [Disable-fetching-of-all-field-trials.patch](/build/patches/Disable-fetching-of-all-field-trials.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Disable seed-based field trials.
Disable reporting of Omnibox suggestions header.| @@ -189,6 +191,7 @@ |**Keep Side Panel Companion disabled**
Mon, 17 Jul 2023 15:24:16 +0000
File: [Keep-Side-Panel-Companion-disabled.patch](/build/patches/Keep-Side-Panel-Companion-disabled.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || |**Keep disabled FetchLaterAPI**
Thu, 28 Sep 2023 08:11:00 +0000
File: [Keep-disabled-FetchLaterAPI.patch](/build/patches/Keep-disabled-FetchLaterAPI.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Disallow a network request to survive to context destoy.
For Request with active keepalive, if the request does not
start from the same origin.
It also inhibits the blocked request exception to javascript.| |**Keep disabled WebViewMediaIntegrityApi**
Wed, 22 May 2024 07:43:04 +0000
File: [Keep-disabled-WebViewMediaIntegrityApi.patch](/build/patches/Keep-disabled-WebViewMediaIntegrityApi.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Disables a new mechanism similar to Web Environment Integrity API in use in webviews
see https://issuetracker.google.com/issues/327186031
https://android-developers.googleblog.com/2023/11/increasing-trust-for-embedded-media.html
need: Add-cromite-flags-support.patch| +|**Keep disabled cache sharing for pervasive scripts**
Sat, 28 Jun 2025 08:17:35 +0000
File: [Keep-disabled-cache-sharing-for-pervasive-scripts.patch](/build/patches/Keep-disabled-cache-sharing-for-pervasive-scripts.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Keeps disabled the new feature that allows bypassing the cache partition for specific urls.| |**Keep empty tabs between sessions**
Wed, 27 Oct 2021 10:57:09 +0000
File: [Keep-empty-tabs-between-sessions.patch](/build/patches/Keep-empty-tabs-between-sessions.patch)
Author: uazo
Context:
License: GPL-3.0-only || |**Keep flag to allow screenshots in Incognito mode**
Sat, 9 May 2020 08:33:15 +0200
File: [Keep-flag-to-allow-screenshots-in-Incognito-mode.patch](/build/patches/Keep-flag-to-allow-screenshots-in-Incognito-mode.patch)
Author: csagan5
Context:
License: GPL-3.0-only |See also:
* https://github.com/bromite/bromite/issues/551
* https://github.com/bromite/bromite/issues/1816
* https://bugs.chromium.org/p/chromium/issues/detail?id=920762| |**Keyboard protection flag**
Tue, 14 Mar 2023 15:48:21 +0000
File: [Keyboard-protection-flag.patch](/build/patches/Keyboard-protection-flag.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Hides user preference on the system keyboard by setting the standard
eng layout and removing the layout information from the javascript
keyboard events.|