[AUTO][DOC] Generate patches doc for master branch

docs/PATCHES.md

@@ -85,12 +85,14 @@
 |**Disable GetInstalledRelatedApps API** <br><sub><nobr> Sun, 7 May 2023 13:13:47 +0000</nobr> <br>File: [Disable-GetInstalledRelatedApps-API.patch](/build/patches/Disable-GetInstalledRelatedApps-API.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-2.0-or-later</nobr> ||
 |**Disable NTP remote suggestions by default** <br><sub><nobr> Thu, 12 Oct 2017 08:15:17 +0200</nobr> <br>File: [Disable-NTP-remote-suggestions-by-default.patch](/build/patches/Disable-NTP-remote-suggestions-by-default.patch) <br><nobr>Author: csagan5</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-3.0-only</nobr> ||
 |**Disable Paint Preview by default** <br><sub><nobr> Wed, 20 Mar 2024 16:26:23 +0000</nobr> <br>File: [Disable-Paint-Preview-by-default.patch](/build/patches/Disable-Paint-Preview-by-default.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-2.0-or-later</nobr> ||
+|**Disable Posture API** <br><sub><nobr> Mon, 20 Jan 2025 16:54:03 +0000</nobr> <br>File: [Disable-Posture-API.patch](/build/patches/Disable-Posture-API.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: </nobr> |see https://issues.chromium.org/issues/40124716<br>and https://github.com/w3c/device-posture/blob/gh-pages/security-privacy-self-assessment.md|
 |**Disable PrivacyGuide** <br><sub><nobr> Sun, 31 Jul 2022 22:13:11 +0200</nobr> <br>File: [Disable-PrivacyGuide.patch](/build/patches/Disable-PrivacyGuide.patch) <br><nobr>Author: csagan5</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-3.0-only</nobr> ||
 |**Disable Read Aloud by default** <br><sub><nobr> Wed, 24 Jan 2024 12:19:44 +0000</nobr> <br>File: [Disable-Read-Aloud-by-default.patch](/build/patches/Disable-Read-Aloud-by-default.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: </nobr> ||
 |**Disable Real Box** <br><sub><nobr> Sun, 5 Nov 2023 17:59:54 +0000</nobr> <br>File: [Disable-Real-Box.patch](/build/patches/Disable-Real-Box.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: </nobr> |Real-box is search box in ntp|
 |**Disable Service and Shared workers on 3P iframe** <br><sub><nobr> Sun, 5 Nov 2023 18:05:19 +0000</nobr> <br>File: [Disable-Service-and-Shared-workers-on-3P-iframe.patch](/build/patches/Disable-Service-and-Shared-workers-on-3P-iframe.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-2.0-or-later</nobr> |Disabled by default due https://bugs.chromium.org/p/chromium/issues/detail?id=1147281<br>Workers can be reenabled per top-site-url using "Allow 3P Cookies"<br>("Block 3P Cookies" in ui to off) in site settings|
 |**Disable TLS resumption** <br><sub><nobr> Thu, 24 Mar 2022 10:08:00 +0000</nobr> <br>File: [Disable-TLS-resumption.patch](/build/patches/Disable-TLS-resumption.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-3.0-only</nobr> |Disable resumption feature for all HTTPS and QUIC connections;<br>the feature could be used to track users even without cookies.<br>Sessions are not currently saved to disk in Chromium (although<br>there is support for it) but are long enough to constitute a<br>privacy risk (2h for TLS 1.2 and 7 days for TLS 1.3) if user<br>does not frequently close the browser.<br>Since session information is not kept in the HTTP cache it is<br>not cleared when deleting navigation data (although it is possible<br>to clear it by selecting "passwords").<br>Two new user configurable flags are introduced:<br>* kDisableTLSResumption, active by default<br>* kLogTLSResumption, that would allow to find in logcat reused<br>sessions in lines matching "SSL Log:"<br>See also:<br>* https://arxiv.org/abs/1810.07304|
 |**Disable UA full version** <br><sub><nobr> Wed, 16 Feb 2022 14:28:58 +0000</nobr> <br>File: [Disable-UA-full-version.patch](/build/patches/Disable-UA-full-version.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-3.0-only</nobr> |getHighEntropyValues will return only the major version|
+|**Disable Web Bluetooth by default in desktop platforms** <br><sub><nobr> Fri, 24 Jan 2025 14:32:14 +0000</nobr> <br>File: [Disable-Web-Bluetooth-by-default-in-desktop-platforms.patch](/build/patches/Disable-Web-Bluetooth-by-default-in-desktop-platforms.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-2.0-or-later</nobr> |On desktop platforms, disable Bluetooth by default and activate the user-manageable content setting ui.|
 |**Disable WebGPU** <br><sub><nobr> Mon, 1 May 2023 12:07:49 +0000</nobr> <br>File: [Disable-WebGPU.patch](/build/patches/Disable-WebGPU.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-2.0-or-later</nobr> ||
 |**Disable all predictors code** <br><sub><nobr> Tue, 25 Jan 2022 12:22:52 +0000</nobr> <br>File: [Disable-all-predictors-code.patch](/build/patches/Disable-all-predictors-code.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-3.0-only</nobr> ||
 |**Disable all promo dialogs** <br><sub><nobr> Tue, 12 Jun 2018 15:09:26 +0200</nobr> <br>File: [Disable-all-promo-dialogs.patch](/build/patches/Disable-all-promo-dialogs.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-2.0-or-later</nobr> ||
@@ -137,6 +139,7 @@
 |**DoH improvements** <br><sub><nobr> Sat, 26 Sep 2020 14:23:19 +0100</nobr> <br>File: [DoH-improvements.patch](/build/patches/DoH-improvements.patch) <br><nobr>Author: csagan5</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-3.0-only</nobr> |Enable secure mode by default<br>Always enforce DoH even with inconsistent system DNS configuration|
 |**Enable -fwrapv in Clang for non-UBSan builds** <br><sub><nobr> Thu, 22 Dec 2016 07:15:34 -0500</nobr> <br>File: [Enable-fwrapv-in-Clang-for-non-UBSan-builds.patch](/build/patches/Enable-fwrapv-in-Clang-for-non-UBSan-builds.patch) <br><nobr>Author: Daniel</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-3.0-only</nobr> |Using -fwrapv (notably only when not using signed integer overflow checking -<br>since it will override it and result in not performing checks) is just common<br>sense since it eliminates the chance of security vulnerabilities being<br>introduced by optimizations based on signed overflow being undefined.<br>That has happened before, and those optimizations don't even add up to a 0.1%<br>performance increase for this kind of software. It's not worth having.<br>The Linux kernel passes -fwrapv and also -fno-strict-aliasing to disable those<br>dangerous optimizations (since there is so much incorrect code they can break).<br>In fact, it is easy to point to dozens of known examples of invalid code that<br>could potentially be broken by those optimizations.<br>It is not acceptable for projects to be using optimizations that are known to<br>be broken with a bunch of code in their tree.<br>They put barely any effort into even fixing the known cases.<br>Chromium has blacklists for UBSan for 'false positives' (none of which are<br>actually false positives, but rather "undefined, but not a bug beyond<br>potentially being broken by optimizations or even code generation without<br>them") and also for components too full of these bugs for them to currently<br>want to bother with it. That includes a bunch of signed overflow issues<br>(there is sadly no detection for aliasing violations, which are fairly common,<br>but not that common).<br>Ideally, -fwrapv could be always passed, but unfortunately the way it is<br>implemented has silly interactions with other switches.<br>The reason it would still make sense to pass it is because due to their UBSan<br>blacklists, they get far from full coverage with it, so -fwrapv would still<br>be better than nothing where it's not being used.<br>Since -fwrapv makes signed integer overflow well-defined, Clang will disable<br>the UBSan checks for signed integer overflow, including in the<br>production-oriented trapping mode used for hardening.<br>Excerpt from https://github.com/bromite/bromite/issues/226|
 |**Enable Android Dynamic Performance Framework** <br><sub><nobr> Wed, 23 Aug 2023 13:49:19 +0000</nobr> <br>File: [Enable-Android-Dynamic-Performance-Framework.patch](/build/patches/Enable-Android-Dynamic-Performance-Framework.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-2.0-or-later</nobr> ||
+|**Enable Cert Management UI** <br><sub><nobr> Thu, 16 Jan 2025 09:43:07 +0000</nobr> <br>File: [Enable-Cert-Management-UI.patch](/build/patches/Enable-Cert-Management-UI.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-2.0-or-later</nobr> |Activates the ui of certificate management in desktop platforms,<br>disabling the use of system certificates by default (which can be activated from the ui).|
 |**Enable Certificate Transparency** <br><sub><nobr> Fri, 10 Jun 2022 14:20:02 +0200</nobr> <br>File: [Enable-Certificate-Transparency.patch](/build/patches/Enable-Certificate-Transparency.patch) <br><nobr>Author: csagan5</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-3.0-only</nobr> |Reporting/auditing functionalities are disabled; a flag is exposed.<br>Add guard to make sure that certificate transparency stays enabled<br>by default.|
 |**Enable Do-Not-Track by default** <br><sub><nobr> Wed, 29 May 2024 13:49:01 +0000</nobr> <br>File: [Enable-Do-Not-Track-by-default.patch](/build/patches/Enable-Do-Not-Track-by-default.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-2.0-or-later</nobr> ||
 |**Enable Document Open Inheritance Removal** <br><sub><nobr> Tue, 28 Mar 2023 15:43:18 +0000</nobr> <br>File: [Enable-Document-Open-Inheritance-Removal.patch](/build/patches/Enable-Document-Open-Inheritance-Removal.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-2.0-or-later</nobr> ||
@@ -144,6 +147,7 @@
 |**Enable HEVC by default** <br><sub><nobr> Tue, 27 Sep 2022 23:39:54 +0200</nobr> <br>File: [Enable-HEVC-by-default.patch](/build/patches/Enable-HEVC-by-default.patch) <br><nobr>Author: csagan5</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-3.0-only</nobr> |Add a guard to avoid setting to be disabled upstream.|
 |**Enable HighEfficiencyMode by default** <br><sub><nobr> Wed, 28 Dec 2022 15:47:58 +0000</nobr> <br>File: [Enable-HighEfficiencyMode-by-default.patch](/build/patches/Enable-HighEfficiencyMode-by-default.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-2.0-or-later</nobr> |Only valid for desktop platform: activation of auto freeze in<br>background tabs with high CPU consumption, which is not visible from<br>the ui and therefore not user controllable.<br>The feature is controlled by the "freezing-without-battery-saver" flag<br>active by default.|
 |**Enable ImprovedBookmarks by default** <br><sub><nobr> Tue, 12 Sep 2023 12:39:23 +0000</nobr> <br>File: [Enable-ImprovedBookmarks-by-default.patch](/build/patches/Enable-ImprovedBookmarks-by-default.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-2.0-or-later</nobr> ||
+|**Enable ProcessBoundStringEncryption by default** <br><sub><nobr> Mon, 20 Jan 2025 16:55:57 +0000</nobr> <br>File: [Enable-ProcessBoundStringEncryption-by-default.patch](/build/patches/Enable-ProcessBoundStringEncryption-by-default.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-2.0-or-later</nobr> |Data placed into a crypto::ProcessBoundString no longer appears in crash dumps<br>or memory dumps so should be used for any sensitive data that should be process-bound.<br>https://issuetracker.google.com/issues/372873695|
 |**Enable StrictOriginIsolation and SitePerProcess** <br><sub><nobr> Sat, 29 Jan 2022 15:25:19 +0000</nobr> <br>File: [Enable-StrictOriginIsolation-and-SitePerProcess.patch](/build/patches/Enable-StrictOriginIsolation-and-SitePerProcess.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-3.0-only</nobr> |Enable the StrictOriginIsolation feature and the SitePerProcess preference.<br>SitePerProcess: bypass any device memory size check.<br>SitePerProcess: always consider enterprise policies applicable.|
 |**Enable darken websites checkbox in themes** <br><sub><nobr> Thu, 20 Aug 2020 20:15:34 +0200</nobr> <br>File: [Enable-darken-websites-checkbox-in-themes.patch](/build/patches/Enable-darken-websites-checkbox-in-themes.patch) <br><nobr>Author: csagan5</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-3.0-only</nobr> |Unexpire #darken-websites-checkbox-in-themes-setting|
 |**Enable gwp asan on Android** <br><sub><nobr> Fri, 12 Jan 2024 15:04:40 +0000</nobr> <br>File: [Enable-gwp-asan-on-Android.patch](/build/patches/Enable-gwp-asan-on-Android.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: </nobr> |the patch enables gwp asan in android and changes the activation<br>conditions to 50% for all build configs.<br>in android there is a test function accessible in the developer settings.|
@@ -204,6 +208,7 @@
 |**Partition blobs by top frame URL** <br><sub><nobr> Tue, 20 Sep 2022 07:20:01 +0000</nobr> <br>File: [Partition-blobs-by-top-frame-URL.patch](/build/patches/Partition-blobs-by-top-frame-URL.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-3.0-only</nobr> |Verifies that the blob was created with the same top frame URL<br>or, if not defined, by the same agent cluster.|
 |**Partitioning all cookies by top frame domain** <br><sub><nobr> Mon, 9 Jan 2023 12:02:05 +0000</nobr> <br>File: [Partitioning-all-cookies-by-top-frame-domain.patch](/build/patches/Partitioning-all-cookies-by-top-frame-domain.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-2.0-or-later</nobr> |Enables cookie partitioning by top frame etld, respecting the<br>user's possible wish to disable all third-party cookies.<br>Disabling the flag via the ui restores the normal mode, where<br>samesite=none first-party cookies are sent in third-party contexts.|
 |**Private network access content settings** <br><sub><nobr> Wed, 17 Apr 2024 18:45:54 +0000</nobr> <br>File: [Private-network-access-content-settings.patch](/build/patches/Private-network-access-content-settings.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-2.0-or-later</nobr> |Block access to the local network by default in android while allowing<br>user choice in desktop platforms.|
+|**PublicKeyCredential fingerprinting mitigations** <br><sub><nobr> Thu, 23 Jan 2025 17:01:50 +0000</nobr> <br>File: [PublicKeyCredential-fingerprinting-mitigations.patch](/build/patches/PublicKeyCredential-fingerprinting-mitigations.patch) <br><nobr>Author: uazo</nobr> <br><nobr>Context: </nobr> <br><nobr>License: </nobr> |Removes the possibility of obtaining the presence of Windows Hello and<br>Bluetooth by querying the PublicKeyCredential of the webauth api in<br>the Windows platform|
 |**Re-introduce modal dialog flag to close all tabs** <br><sub><nobr> Mon, 8 Aug 2022 02:35:35 +0200</nobr> <br>File: [Re-introduce-modal-dialog-flag-to-close-all-tabs.patch](/build/patches/Re-introduce-modal-dialog-flag-to-close-all-tabs.patch) <br><nobr>Author: csagan5</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-3.0-only</nobr> |Revert "[Tab Management] Cleanup close all tabs modal dialog flags"<br>This reverts commit 614a998c5af5dcd36baffa6d65090c0b8decb03f.|
 |**Re-introduce override_build_timestamp** <br><sub><nobr> Sun, 30 Dec 2018 09:26:12 +0100</nobr> <br>File: [Re-introduce-override_build_timestamp.patch](/build/patches/Re-introduce-override_build_timestamp.patch) <br><nobr>Author: csagan5</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-3.0-only</nobr> |Revert "Remove override_build_date gn arg."<br>This reverts commit e335101eedd3ab28d16dcb4b22e5ee0b60044b89.<br>Use (overriden) build timestamp for chrome_version_id|
 |**Reduce HTTP headers in DoH requests to bare minimum** <br><sub><nobr> Sat, 28 Apr 2018 08:30:26 +0200</nobr> <br>File: [Reduce-HTTP-headers-in-DoH-requests-to-bare-minimum.patch](/build/patches/Reduce-HTTP-headers-in-DoH-requests-to-bare-minimum.patch) <br><nobr>Author: csagan5</nobr> <br><nobr>Context: </nobr> <br><nobr>License: GPL-3.0-only</nobr> ||