diff --git a/docs/PATCHES.md b/docs/PATCHES.md index 70b0812b..c7626271 100644 --- a/docs/PATCHES.md +++ b/docs/PATCHES.md @@ -85,12 +85,14 @@ |**Disable GetInstalledRelatedApps API**
Sun, 7 May 2023 13:13:47 +0000
File: [Disable-GetInstalledRelatedApps-API.patch](/build/patches/Disable-GetInstalledRelatedApps-API.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || |**Disable NTP remote suggestions by default**
Thu, 12 Oct 2017 08:15:17 +0200
File: [Disable-NTP-remote-suggestions-by-default.patch](/build/patches/Disable-NTP-remote-suggestions-by-default.patch)
Author: csagan5
Context:
License: GPL-3.0-only || |**Disable Paint Preview by default**
Wed, 20 Mar 2024 16:26:23 +0000
File: [Disable-Paint-Preview-by-default.patch](/build/patches/Disable-Paint-Preview-by-default.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || +|**Disable Posture API**
Mon, 20 Jan 2025 16:54:03 +0000
File: [Disable-Posture-API.patch](/build/patches/Disable-Posture-API.patch)
Author: uazo
Context:
License: |see https://issues.chromium.org/issues/40124716
and https://github.com/w3c/device-posture/blob/gh-pages/security-privacy-self-assessment.md| |**Disable PrivacyGuide**
Sun, 31 Jul 2022 22:13:11 +0200
File: [Disable-PrivacyGuide.patch](/build/patches/Disable-PrivacyGuide.patch)
Author: csagan5
Context:
License: GPL-3.0-only || |**Disable Read Aloud by default**
Wed, 24 Jan 2024 12:19:44 +0000
File: [Disable-Read-Aloud-by-default.patch](/build/patches/Disable-Read-Aloud-by-default.patch)
Author: uazo
Context:
License: || |**Disable Real Box**
Sun, 5 Nov 2023 17:59:54 +0000
File: [Disable-Real-Box.patch](/build/patches/Disable-Real-Box.patch)
Author: uazo
Context:
License: |Real-box is search box in ntp| |**Disable Service and Shared workers on 3P iframe**
Sun, 5 Nov 2023 18:05:19 +0000
File: [Disable-Service-and-Shared-workers-on-3P-iframe.patch](/build/patches/Disable-Service-and-Shared-workers-on-3P-iframe.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Disabled by default due https://bugs.chromium.org/p/chromium/issues/detail?id=1147281
Workers can be reenabled per top-site-url using "Allow 3P Cookies"
("Block 3P Cookies" in ui to off) in site settings| |**Disable TLS resumption**
Thu, 24 Mar 2022 10:08:00 +0000
File: [Disable-TLS-resumption.patch](/build/patches/Disable-TLS-resumption.patch)
Author: uazo
Context:
License: GPL-3.0-only |Disable resumption feature for all HTTPS and QUIC connections;
the feature could be used to track users even without cookies.
Sessions are not currently saved to disk in Chromium (although
there is support for it) but are long enough to constitute a
privacy risk (2h for TLS 1.2 and 7 days for TLS 1.3) if user
does not frequently close the browser.
Since session information is not kept in the HTTP cache it is
not cleared when deleting navigation data (although it is possible
to clear it by selecting "passwords").
Two new user configurable flags are introduced:
* kDisableTLSResumption, active by default
* kLogTLSResumption, that would allow to find in logcat reused
sessions in lines matching "SSL Log:"
See also:
* https://arxiv.org/abs/1810.07304| |**Disable UA full version**
Wed, 16 Feb 2022 14:28:58 +0000
File: [Disable-UA-full-version.patch](/build/patches/Disable-UA-full-version.patch)
Author: uazo
Context:
License: GPL-3.0-only |getHighEntropyValues will return only the major version| +|**Disable Web Bluetooth by default in desktop platforms**
Fri, 24 Jan 2025 14:32:14 +0000
File: [Disable-Web-Bluetooth-by-default-in-desktop-platforms.patch](/build/patches/Disable-Web-Bluetooth-by-default-in-desktop-platforms.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |On desktop platforms, disable Bluetooth by default and activate the user-manageable content setting ui.| |**Disable WebGPU**
Mon, 1 May 2023 12:07:49 +0000
File: [Disable-WebGPU.patch](/build/patches/Disable-WebGPU.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || |**Disable all predictors code**
Tue, 25 Jan 2022 12:22:52 +0000
File: [Disable-all-predictors-code.patch](/build/patches/Disable-all-predictors-code.patch)
Author: uazo
Context:
License: GPL-3.0-only || |**Disable all promo dialogs**
Tue, 12 Jun 2018 15:09:26 +0200
File: [Disable-all-promo-dialogs.patch](/build/patches/Disable-all-promo-dialogs.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || @@ -137,6 +139,7 @@ |**DoH improvements**
Sat, 26 Sep 2020 14:23:19 +0100
File: [DoH-improvements.patch](/build/patches/DoH-improvements.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Enable secure mode by default
Always enforce DoH even with inconsistent system DNS configuration| |**Enable -fwrapv in Clang for non-UBSan builds**
Thu, 22 Dec 2016 07:15:34 -0500
File: [Enable-fwrapv-in-Clang-for-non-UBSan-builds.patch](/build/patches/Enable-fwrapv-in-Clang-for-non-UBSan-builds.patch)
Author: Daniel
Context:
License: GPL-3.0-only |Using -fwrapv (notably only when not using signed integer overflow checking -
since it will override it and result in not performing checks) is just common
sense since it eliminates the chance of security vulnerabilities being
introduced by optimizations based on signed overflow being undefined.
That has happened before, and those optimizations don't even add up to a 0.1%
performance increase for this kind of software. It's not worth having.
The Linux kernel passes -fwrapv and also -fno-strict-aliasing to disable those
dangerous optimizations (since there is so much incorrect code they can break).
In fact, it is easy to point to dozens of known examples of invalid code that
could potentially be broken by those optimizations.
It is not acceptable for projects to be using optimizations that are known to
be broken with a bunch of code in their tree.
They put barely any effort into even fixing the known cases.
Chromium has blacklists for UBSan for 'false positives' (none of which are
actually false positives, but rather "undefined, but not a bug beyond
potentially being broken by optimizations or even code generation without
them") and also for components too full of these bugs for them to currently
want to bother with it. That includes a bunch of signed overflow issues
(there is sadly no detection for aliasing violations, which are fairly common,
but not that common).
Ideally, -fwrapv could be always passed, but unfortunately the way it is
implemented has silly interactions with other switches.
The reason it would still make sense to pass it is because due to their UBSan
blacklists, they get far from full coverage with it, so -fwrapv would still
be better than nothing where it's not being used.
Since -fwrapv makes signed integer overflow well-defined, Clang will disable
the UBSan checks for signed integer overflow, including in the
production-oriented trapping mode used for hardening.
Excerpt from https://github.com/bromite/bromite/issues/226| |**Enable Android Dynamic Performance Framework**
Wed, 23 Aug 2023 13:49:19 +0000
File: [Enable-Android-Dynamic-Performance-Framework.patch](/build/patches/Enable-Android-Dynamic-Performance-Framework.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || +|**Enable Cert Management UI**
Thu, 16 Jan 2025 09:43:07 +0000
File: [Enable-Cert-Management-UI.patch](/build/patches/Enable-Cert-Management-UI.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Activates the ui of certificate management in desktop platforms,
disabling the use of system certificates by default (which can be activated from the ui).| |**Enable Certificate Transparency**
Fri, 10 Jun 2022 14:20:02 +0200
File: [Enable-Certificate-Transparency.patch](/build/patches/Enable-Certificate-Transparency.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Reporting/auditing functionalities are disabled; a flag is exposed.
Add guard to make sure that certificate transparency stays enabled
by default.| |**Enable Do-Not-Track by default**
Wed, 29 May 2024 13:49:01 +0000
File: [Enable-Do-Not-Track-by-default.patch](/build/patches/Enable-Do-Not-Track-by-default.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || |**Enable Document Open Inheritance Removal**
Tue, 28 Mar 2023 15:43:18 +0000
File: [Enable-Document-Open-Inheritance-Removal.patch](/build/patches/Enable-Document-Open-Inheritance-Removal.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || @@ -144,6 +147,7 @@ |**Enable HEVC by default**
Tue, 27 Sep 2022 23:39:54 +0200
File: [Enable-HEVC-by-default.patch](/build/patches/Enable-HEVC-by-default.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Add a guard to avoid setting to be disabled upstream.| |**Enable HighEfficiencyMode by default**
Wed, 28 Dec 2022 15:47:58 +0000
File: [Enable-HighEfficiencyMode-by-default.patch](/build/patches/Enable-HighEfficiencyMode-by-default.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Only valid for desktop platform: activation of auto freeze in
background tabs with high CPU consumption, which is not visible from
the ui and therefore not user controllable.
The feature is controlled by the "freezing-without-battery-saver" flag
active by default.| |**Enable ImprovedBookmarks by default**
Tue, 12 Sep 2023 12:39:23 +0000
File: [Enable-ImprovedBookmarks-by-default.patch](/build/patches/Enable-ImprovedBookmarks-by-default.patch)
Author: uazo
Context:
License: GPL-2.0-or-later || +|**Enable ProcessBoundStringEncryption by default**
Mon, 20 Jan 2025 16:55:57 +0000
File: [Enable-ProcessBoundStringEncryption-by-default.patch](/build/patches/Enable-ProcessBoundStringEncryption-by-default.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Data placed into a crypto::ProcessBoundString no longer appears in crash dumps
or memory dumps so should be used for any sensitive data that should be process-bound.
https://issuetracker.google.com/issues/372873695| |**Enable StrictOriginIsolation and SitePerProcess**
Sat, 29 Jan 2022 15:25:19 +0000
File: [Enable-StrictOriginIsolation-and-SitePerProcess.patch](/build/patches/Enable-StrictOriginIsolation-and-SitePerProcess.patch)
Author: uazo
Context:
License: GPL-3.0-only |Enable the StrictOriginIsolation feature and the SitePerProcess preference.
SitePerProcess: bypass any device memory size check.
SitePerProcess: always consider enterprise policies applicable.| |**Enable darken websites checkbox in themes**
Thu, 20 Aug 2020 20:15:34 +0200
File: [Enable-darken-websites-checkbox-in-themes.patch](/build/patches/Enable-darken-websites-checkbox-in-themes.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Unexpire #darken-websites-checkbox-in-themes-setting| |**Enable gwp asan on Android**
Fri, 12 Jan 2024 15:04:40 +0000
File: [Enable-gwp-asan-on-Android.patch](/build/patches/Enable-gwp-asan-on-Android.patch)
Author: uazo
Context:
License: |the patch enables gwp asan in android and changes the activation
conditions to 50% for all build configs.
in android there is a test function accessible in the developer settings.| @@ -204,6 +208,7 @@ |**Partition blobs by top frame URL**
Tue, 20 Sep 2022 07:20:01 +0000
File: [Partition-blobs-by-top-frame-URL.patch](/build/patches/Partition-blobs-by-top-frame-URL.patch)
Author: uazo
Context:
License: GPL-3.0-only |Verifies that the blob was created with the same top frame URL
or, if not defined, by the same agent cluster.| |**Partitioning all cookies by top frame domain**
Mon, 9 Jan 2023 12:02:05 +0000
File: [Partitioning-all-cookies-by-top-frame-domain.patch](/build/patches/Partitioning-all-cookies-by-top-frame-domain.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Enables cookie partitioning by top frame etld, respecting the
user's possible wish to disable all third-party cookies.
Disabling the flag via the ui restores the normal mode, where
samesite=none first-party cookies are sent in third-party contexts.| |**Private network access content settings**
Wed, 17 Apr 2024 18:45:54 +0000
File: [Private-network-access-content-settings.patch](/build/patches/Private-network-access-content-settings.patch)
Author: uazo
Context:
License: GPL-2.0-or-later |Block access to the local network by default in android while allowing
user choice in desktop platforms.| +|**PublicKeyCredential fingerprinting mitigations**
Thu, 23 Jan 2025 17:01:50 +0000
File: [PublicKeyCredential-fingerprinting-mitigations.patch](/build/patches/PublicKeyCredential-fingerprinting-mitigations.patch)
Author: uazo
Context:
License: |Removes the possibility of obtaining the presence of Windows Hello and
Bluetooth by querying the PublicKeyCredential of the webauth api in
the Windows platform| |**Re-introduce modal dialog flag to close all tabs**
Mon, 8 Aug 2022 02:35:35 +0200
File: [Re-introduce-modal-dialog-flag-to-close-all-tabs.patch](/build/patches/Re-introduce-modal-dialog-flag-to-close-all-tabs.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Revert "[Tab Management] Cleanup close all tabs modal dialog flags"
This reverts commit 614a998c5af5dcd36baffa6d65090c0b8decb03f.| |**Re-introduce override_build_timestamp**
Sun, 30 Dec 2018 09:26:12 +0100
File: [Re-introduce-override_build_timestamp.patch](/build/patches/Re-introduce-override_build_timestamp.patch)
Author: csagan5
Context:
License: GPL-3.0-only |Revert "Remove override_build_date gn arg."
This reverts commit e335101eedd3ab28d16dcb4b22e5ee0b60044b89.
Use (overriden) build timestamp for chrome_version_id| |**Reduce HTTP headers in DoH requests to bare minimum**
Sat, 28 Apr 2018 08:30:26 +0200
File: [Reduce-HTTP-headers-in-DoH-requests-to-bare-minimum.patch](/build/patches/Reduce-HTTP-headers-in-DoH-requests-to-bare-minimum.patch)
Author: csagan5
Context:
License: GPL-3.0-only ||