diff --git a/docs/PATCHES.md b/docs/PATCHES.md
index 2e9e652a..89759443 100644
--- a/docs/PATCHES.md
+++ b/docs/PATCHES.md
@@ -47,6 +47,7 @@
|**Always open browser controls in new tab**
Wed, 28 Dec 2022 07:19:58 +0000
File: [Always-open-browser-controls-in-new-tab.patch](/build/patches/Always-open-browser-controls-in-new-tab.patch)
Author: uazo
Context:
License: GPL-2.0-or-later ||
|**Always use new tab page for default home page**
Wed, 27 Jun 2018 11:02:38 +0200
File: [Always-use-new-tab-page-for-default-home-page.patch](/build/patches/Always-use-new-tab-page-for-default-home-page.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Ignore any partner-provided home page.|
|**Android Toolbar Scroll Ablation setting**
Wed, 22 May 2024 07:41:34 +0000
File: [Android-Toolbar-Scroll-Ablation-setting.patch](/build/patches/Android-Toolbar-Scroll-Ablation-setting.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Adds a setting for blocking the toolbar hiding
need: Add-cromite-flags-support.patch|
+|**Android fonts fingerprinting mitigation**
Sat, 15 Feb 2025 16:25:31 +0000
File: [Android-fonts-fingerprinting-mitigation.patch](/build/patches/Android-fonts-fingerprinting-mitigation.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Replaces system fonts with a predefined set downloaded from www.cromite.org|
|**Ask to restart on connection change**
Tue, 18 Jun 2024 15:31:12 +0000
File: [Ask-for-restart-on-connection-change.patch](/build/patches/Ask-for-restart-on-connection-change.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Experimental use of the OfflineDetector to identify network change, disabled by default.
If it is active, when the network change is detected by the android API,
the user is warned and asked to restart the browser.
Technically, blink's freeze mode is exploited, which allows javascript
execution and network calls to be blocked.
A preventive shutdown of all service workers is carried out, to inhibit the sending
of messages over the new ip, since the service workers have access
to the background fetch api.
The freeze and resume event of javascript is deliberately left, since the
page could deduct it in any case. In any case during the execution of
the javascript events, the page can only access the FetchLater api,
which is disabled by another patch.
The patch also changes the standard behaviour of the browser, allowing visible pages to freeze.
This could lead to the failure of some DCHECKS related to the handling of UI messages at unfreeze,
but since the goal is a reboot, this should not be the case.|
|**AudioBuffer, AnalyserNode: fp mitigations**
Sun, 25 Mar 2018 21:49:37 +0200
File: [AudioBuffer-AnalyserNode-fp-mitigations.patch](/build/patches/AudioBuffer-AnalyserNode-fp-mitigations.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Truncate base latency precision to two digits|
|**Battery API: return nothing**
Thu, 22 Mar 2018 22:11:57 +0100
File: [Battery-API-return-nothing.patch](/build/patches/Battery-API-return-nothing.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Include @thestinger's fix for correct charging/unknown values|
@@ -75,7 +76,6 @@
|**Disable AsyncDNS by default**
Sat, 26 Mar 2022 16:41:55 +0100
File: [Disable-AsyncDNS-by-default.patch](/build/patches/Disable-AsyncDNS-by-default.patch)
Author: csagan5
Context:
License: GPL-3.0-only |This feature is detrimental to privacy, see also:
* https://bugs.chromium.org/p/chromium/issues/detail?id=805020|
|**Disable BackForwardCache**
Tue, 14 Feb 2023 16:29:12 +0000
File: [Disable-BackForwardCache.patch](/build/patches/Disable-BackForwardCache.patch)
Author: uazo
Context:
License: GPL-2.0-or-later ||
|**Disable CSS blink-feature support**
Mon, 29 Jul 2024 06:48:25 +0000
File: [Disable-CSS-blink-feature-support.patch](/build/patches/Disable-CSS-blink-feature-support.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |the function is not currently exposed to websites but is only allowed for testing.
disabled as it is an potentially advanced fingerprinting mechanism.
also fixed the possibility of using internal selectors for speculation rules.
see https://chromium-review.googlesource.com/c/chromium/src/+/5540782|
-|**Disable Component Updates**
Tue, 8 Nov 2022 12:41:22 +0000
File: [Disable-Component-Updates.patch](/build/patches/Disable-Component-Updates.patch)
Author: uazo
Context:
License: GPL-2.0-or-later ||
|**Disable Compose feature**
Mon, 26 Feb 2024 16:35:16 +0000
File: [Disable-Compose-feature.patch](/build/patches/Disable-Compose-feature.patch)
Author: uazo
Context:
License: GPL-2.0-or-later ||
|**Disable Compression Dictionary Transport**
Sat, 3 Jun 2023 15:04:55 +0000
File: [Disable-Compression-Dictionary-Transport.patch](/build/patches/Disable-Compression-Dictionary-Transport.patch)
Author: uazo
Context:
License: GPL-2.0-or-later ||
|**Disable DRM media origin IDs preprovisioning**
Fri, 24 Jan 2020 09:46:48 +0100
File: [Disable-DRM-media-origin-IDs-preprovisioning.patch](/build/patches/Disable-DRM-media-origin-IDs-preprovisioning.patch)
Author: csagan5
Context:
License: GPL-3.0-only ||
@@ -149,6 +149,7 @@
|**Enable ImprovedBookmarks by default**
Tue, 12 Sep 2023 12:39:23 +0000
File: [Enable-ImprovedBookmarks-by-default.patch](/build/patches/Enable-ImprovedBookmarks-by-default.patch)
Author: uazo
Context:
License: GPL-2.0-or-later ||
|**Enable ProcessBoundStringEncryption by default**
Mon, 20 Jan 2025 16:55:57 +0000
File: [Enable-ProcessBoundStringEncryption-by-default.patch](/build/patches/Enable-ProcessBoundStringEncryption-by-default.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Data placed into a crypto::ProcessBoundString no longer appears in crash dumps
or memory dumps so should be used for any sensitive data that should be process-bound.
https://issuetracker.google.com/issues/372873695|
|**Enable StrictOriginIsolation and SitePerProcess**
Sat, 29 Jan 2022 15:25:19 +0000
File: [Enable-StrictOriginIsolation-and-SitePerProcess.patch](/build/patches/Enable-StrictOriginIsolation-and-SitePerProcess.patch)
Author: uazo
Context:
License: GPL-3.0-only |Enable the StrictOriginIsolation feature and the SitePerProcess preference.
SitePerProcess: bypass any device memory size check.
SitePerProcess: always consider enterprise policies applicable.|
+|**Enable component updater**
Wed, 29 Jan 2025 12:50:13 +0000
File: [Enable-component-updater.patch](/build/patches/Enable-component-updater.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Activates component updaters in one-shot mode: downloading occurs
only once and updates are inhibited.
Only cromite-specific components can be enabled.|
|**Enable darken websites checkbox in themes**
Thu, 20 Aug 2020 20:15:34 +0200
File: [Enable-darken-websites-checkbox-in-themes.patch](/build/patches/Enable-darken-websites-checkbox-in-themes.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Unexpire #darken-websites-checkbox-in-themes-setting|
|**Enable gwp asan on Android**
Fri, 12 Jan 2024 15:04:40 +0000
File: [Enable-gwp-asan-on-Android.patch](/build/patches/Enable-gwp-asan-on-Android.patch)
Author: uazo
Context:
License: |the patch enables gwp asan in android and changes the activation
conditions to 50% for all build configs.
in android there is a test function accessible in the developer settings.|
|**Enable menu on reload button**
Sat, 25 May 2024 10:34:38 +0000
File: [Enable-menu-on-reload-button.patch](/build/patches/Enable-menu-on-reload-button.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Activate right-button submenu in reload (desktop platforms).
Patch derived from the ungoogled-chromium patch of the same name.|
@@ -303,6 +304,5 @@
|**ungoogled-chromium: Disable untraceable URLs**
Mon, 12 Feb 2018 21:28:11 +0100
File: [ungoogled-chromium-Disable-untraceable-URLs.patch](/build/patches/ungoogled-chromium-Disable-untraceable-URLs.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Disable additional URLs that are not caught by the "trk" scheme|
|**ungoogled-chromium: Disable webRTC log uploader**
Mon, 12 Feb 2018 21:21:36 +0100
File: [ungoogled-chromium-Disable-webRTC-log-uploader.patch](/build/patches/ungoogled-chromium-Disable-webRTC-log-uploader.patch)
Author: csagan5
Context:
License: GPL-3.0-only ||
|**ungoogled-chromium: no special hosts/domains**
Mon, 12 Feb 2018 21:36:33 +0100
File: [ungoogled-chromium-no-special-hosts-domains.patch](/build/patches/ungoogled-chromium-no-special-hosts-domains.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Disables various detections of Google hosts and functionality specific to them
Disable domain reliability detection|
-|**updater: disable updater pings**
Tue, 2 Jun 2015 11:01:50 +0200
File: [updater-disable-updater-pings.patch](/build/patches/updater-disable-updater-pings.patch)
Author: Jan
Context:
License: GPL-3.0-only |Despite auto-updater being arguably disabled (see previous commit),
Chromium would still send background requests. Kill it.
(trk:170, trk:171)|
|**webRTC: do not expose local IP addresses**
Sat, 9 May 2020 14:42:37 +0200
File: [webRTC-do-not-expose-local-IP-addresses.patch](/build/patches/webRTC-do-not-expose-local-IP-addresses.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Prevent leaks of local IP address and public IP address (when using VPN)
See also:
* https://github.com/bromite/bromite/issues/553
* https://github.com/bromite/bromite/issues/589|
|**webview: Hard no to persistent histograms**
Sun, 27 Dec 2020 09:42:54 -0700
File: [webview-Hard-no-to-persistent-histograms.patch](/build/patches/webview-Hard-no-to-persistent-histograms.patch)
Author: "Kevin
Context:
License: GPL-3.0-only |* It's probably some kind of bug somewhere that these are never
deleted, but they don't really add value to us in the first
place.
* Stop eating 4MB every single time any app that uses webview
ever opens.
* These were guarded by a feature check before
https://chromium.googlesource.com/chromium/src/+/b86102f2a243|