mirror of
https://github.com/optim-enterprises-bv/secureblue.git
synced 2025-11-02 03:18:00 +00:00
48 KiB
48 KiB
A list of Vanadium patches and their secureblue counterpart (if any).
| Vanadium patch | Patch description | Relevance | Counterpart |
|---|---|---|---|
| 0001-Vanadium-string-rebranding | Adjust strings to reflect Vanadium branding | No, branding related | N/A |
| 0002-Vanadium-branding | Apply branding changes specific to Vanadium | No, branding related | N/A |
| 0003-Vanadium-branding-for-WebView | Apply branding changes specific to Vanadium for the WebView | No, branding related | N/A |
| 0004-Support-for-extended-version-name-and-increments | Add support for extended version names and increments | No, not desired | N/A |
| 0005-temporary-Workaround-for-crashes-at-StackTrace-calls | Temporary workaround for crashes at StackTrace calls | No, not desired | N/A |
| 0006-use-64-bit-WebView-processes | Forbid use of 32-bit ABI in WebView | No, Android only | N/A |
| 0007-switch-to-fstack-protector-strong | Use -fstack-protector-strong cflag | Yes | Set in upstream Fedora |
| 0008-enable-fwrapv-in-Clang-for-non-UBSan-builds | Set -fwrapv to make signed integer overflow defined behavior to improve memory safety | Yes | Set in upstream Fedora |
| 0009-enable-ftrivial-auto-var-init-zero | Set -ftrivial-auto-var-init=zero to force clang to initialize automatic variables with zeroes | Yes | Set in upstream Fedora |
| 0010-disable-broken-warning-for-auto-var-init | Minor fix related to the prior patch | No, not desired | N/A |
| 0011-Checkout-PGO-profiles | Checkout PGO profiles | No, not desired | N/A |
| 0012-disable-checkout_nacl | Disables checking out nacl | Yes | nacl is disabled in upstream Fedora |
| 0013-disable-first-run-welcome-page | Disable first-run welcome page | No, branding related | N/A |
| 0014-disable-seed-based-field-trials | Disable seed-based field trials (variations) | Yes | Disabled in secureblue policies for everything except critical fixes |
| 0015-disable-fetching-variations | Disable fetching variations | Yes | Disabled in secureblue policies for everything except critical fixes |
| 0016-disable-WebView-variations-support | Disable WebView variations support | No, Android only | N/A |
| 0017-disable-navigation-error-correction-by-default | Disable navigation error correction by default | Yes | Disabled in secureblue policies |
| 0018-disable-contextual-search-by-default | Disable contextual search by default | No, Android only | N/A |
| 0019-disable-network-prediction-by-default | Disable network prediction by default | Yes | Disabled in secureblue policies |
| 0020-disable-metrics-by-default | Disable metrics by default | Yes | Disabled in secureblue policies |
| 0021-disable-hyperlink-auditing-by-default | Disable hyperlink auditing by default | Yes | Set in secureblue chromium.conf |
| 0022-disable-showing-popular-sites-by-default | Disable showing popular sites by default | Yes | Set in secureblue chromium.conf |
| 0023-disable-article-suggestions-feature-by-default | Disable article suggestions feature by default | Yes | MISSING |
| 0024-disable-content-feed-suggestions-by-default | Disable content feed suggestions by default | Yes | Set in secureblue chromium.conf |
| 0025-disable-sensors-access-by-default | Disable sensors access by default | Yes | Disabled in secureblue policies |
| 0026-block-playing-protected-media-by-default | Block playing protected media by default | Yes | MISSING |
| 0027-disable-third-party-cookies-by-default | Disable third-party cookies by default | Yes | Disabled in secureblue policies |
| 0028-disable-background-sync-by-default | Disable background sync by default | No, not desired | N/A |
| 0029-disable-payment-support-by-default | Disable payment support by default | Yes | Disabled in secureblue policies |
| 0030-disable-media-router-media-remoting-by-default | Disable media router media remoting by default | Yes | Disabled in secureblue policies |
| 0031-disable-media-router-by-default | Disable media router by default | Yes | Disabled in secureblue policies |
| 0032-disable-offering-translations-by-default | Disable offering translations by default | Yes | Disabled in secureblue policies |
| 0033-disable-browser-sign-in-feature-by-default | Disable browser sign-in feature by default | Yes | Disabled in secureblue policies |
| 0034-disable-browser-autologin-by-default | Disable browser autologin feature by default | Yes | Disabled in secureblue policies |
| 0035-disable-safe-browsing-reporting-opt-in-by-default | Disable safe browsing reporting opt-in by default | Yes | Disabled in secureblue policies |
| 0036-disable-unused-safe-browsing-option-by-default | Disable safe browsing due to lack of Play Services | No, Android only | N/A |
| 0037-disable-media-DRM-preprovisioning-by-default | Disables media DRM preprovisioning | Yes | Set in secureblue chromium.conf |
| 0038-disable-autofill-server-communication-by-default | Disables autofill server communication | Yes | Set in secureblue chromium.conf |
| 0039-disable-component-updater-pings-by-default | Disables component updater pings | Yes | MISSING |
| 0040-disable-search-provider-logo | Disables search provider logo | No, branding related | N/A |
| 0041-disable-trivial-subdomain-hiding | Disables trivial subdomain hiding | Yes | MISSING |
| 0042-disable-learn-more-link-in-incognito-new-tab | Disables learn more link in incognito new tab | No, branding related | N/A |
| 0043-disable-Omaha-update-check-support | Disables Omaha update check support | No, not desired | N/A |
| 0044-disable-GaiaAuthFetcher-code-due-to-upstream-bug | Disables GaiaAuthFetcher code due to upstream bug | No, not desired | N/A |
| 0045-Disable-adding-a-signed-out-avatar-on-new-tab-pages- | Disables adding a signed-out avatar on new tab pages | No, not desired | N/A |
| 0046-Disable-newer-privacy-sandbox-features-by-default | Disables newer privacy sandbox features | Yes | Set in secureblue chromium.conf |
| 0047-Disable-WebGPU-in-Android-by-default | Disables WebGPU in Android | No, Android only | N/A |
| 0048-Disable-top-toolbar-button-Translate-option-by-defau.patch | Disable top toolbar button | No, Android only | N/A |
| 0049-always-use-local-new-tab-page | Always use local new tab page | No, not desired | N/A |
| 0050-mark-non-secure-origins-as-dangerous | Marks non-secure origins as dangerous | Yes | MISSING |
| 0051-most-private-WebRTC-IP-handling-policy-by-default | Most private WebRTC IP handling policy by default | Yes | Set in secureblue policies |
| 0052-stub-out-the-battery-status-API | Stubs out the battery status API | No, Android only | N/A |
| 0053-stop-ignoring-download-location-prompt-setting | Stops ignoring download location prompt setting | No, Android only | N/A |
| 0054-show-download-prompt-again-by-default | Shows download prompt again by default | No, Android only | N/A |
| 0055-disable-trials-of-privacy-aware-analytics-advertisin | Disables trials of privacy-aware analytics advertising | Yes | MISSING |
| 0056-disable-using-Play-services-fonts | Disables using Play services fonts | No, Android only | N/A |
| 0057-disable-appending-variations-header | Disables appending variations header | No, not desired | N/A |
| 0058-Disable-detailed-language-settings-by-default | Disables detailed language settings by default | No, not desired | N/A |
| 0059-disable-fetching-optimization-guides-by-default | Disables fetching optimization guides by default | Yes | Set in secureblue chromium.conf |
| 0060-set-default-search-engine-to-DuckDuckGo | Sets default search engine to DuckDuckGo | No, not desired | N/A |
| 0061-set-original-package-to-org.chromium.chrome | Sets original package to org.chromium.chrome | No, Android only | N/A |
| 0062-Make-HTTPS-only-mode-the-default | Makes HTTPS-only mode the default | Yes | Set in secureblue policies |
| 0063-require-HTTPS-for-component-updates | Requires HTTPS for component updates | Yes | MISSING |
| 0064-use-vanadium.app-for-component-updates | Use vanadium.app for component updates | No, not desired | N/A |
| 0065-use-grapheneos.network-when-verifying-DNS-over-HTTPS | Use grapheneos.network when verifying DNS over HTTPS | No, not desired | N/A |
| 0066-Use-GrapheneOS-connectivity-check-as-well-for-Help-a | Use GrapheneOS connectivity check as well for Help | No, not desired | N/A |
| 0067-enable-memory-tagging-in-all-processes | Enable memory tagging in all processes | No, Android only | N/A |
| 0068-bugfix-do-not-attempt-to-re-enable-memory-tagging | Bugfix: do not attempt to re-enable memory tagging | No, Android only | N/A |
| 0069-enable-prefetch-privacy-changes-by-default | Enable prefetch privacy changes by default | Yes | Set in secureblue chromium.conf |
| 0070-enable-split-cache-by-default | Enable split cache by default | Yes | Set in secureblue chromium.conf |
| 0071-enable-partitioning-connections-by-default | Enable partitioning connections by default | Yes | Set in secureblue chromium.conf |
| 0072-enable-dubious-Do-Not-Track-feature-by-default | Enable dubious Do Not Track feature by default | No, not desired | N/A |
| 0073-enable-strict-site-isolation-by-default-on-Android | Enable strict site isolation by default on Android | No, Android only | N/A |
| 0074-Enable-strict-origin-isolation-by-default | Enable strict origin isolation by default | Yes | Set in secureblue chromium.conf |
| 0075-Enable-reduce-accept-language-header-by-default | Enable reduce accept language header by default | No, fingerprinting related | N/A |
| 0076-enable-process-isolated-sandboxed-iframes-by-default | Enable process isolated sandboxed iframes by default | Yes | Set in secureblue chromium.conf |
| 0077-use-Google-Chrome-branding-for-client-hints | Use Google Chrome branding for client hints | No, fingerprinting related | N/A |
| 0078-add-trichrome-browser-apk-targets | Add trichrome browser APK targets | No, Android only | N/A |
| 0079-Remove-logo-from-chrome-version | Remove logo from Chrome version | No, Android only | N/A |
| 0080-redirect-settings-help-icon | Redirect settings help icon | No, branding related | N/A |
| 0081-remove-Google-prefix-from-storage-settings-label | Remove Google prefix from storage settings label | No, branding related | N/A |
| 0082-remove-Help-feedback-menu-entry | Remove Help feedback menu entry | No, Android only | N/A |
| 0083-hide-passwords.google.com-link-when-not-supported | Hide passwords.google.com link when not supported | No, Android only | N/A |
| 0084-temporary-Always-partition-third-party-storage | Temporary always partition third-party storage | Yes | Set in secureblue chromium.conf |
| 0085-update-trichrome_library_apk-expectation-file | Update trichrome_library_apk expectation file | No, Android only | N/A |
| 0086-Consolidate-downstream-changes-in-dependencies-sourc | Consolidate downstream changes in dependencies source | No, Android only | N/A |
| 0087-Consolidate-downstream-strings-in-a-separate-file-fo | Consolidate downstream strings in a separate file | No, branding related | N/A |
| 0088-Utility-class-for-adding-shared-preference-keys | Utility class for adding shared preference keys | No, Android only | N/A |
| 0089-Helper-class-for-modifying-preferences-at-chrome-lay | Helper class for modifying preferences at Chrome layer | No, Android only | N/A |
| 0090-Utility-class-for-modifying-preferences-at-Privacy-s | Utility class for modifying preferences at Privacy settings layer | No, Android only | N/A |
| 0091-Remove-not-applicable-additional-terms-of-services | Remove not applicable additional terms of services | No, branding related | N/A |
| 0092-remove-Google-terms-of-use-and-privacy-policy | Remove Google terms of use and privacy policy | No, branding related | N/A |
| 0093-disable-unused-password-check-feature | Disable unused password check feature | No, Android only | N/A |
| 0094-remove-unwanted-sync-and-services-link | Remove unwanted sync and services link | No, branding related | N/A |
| 0095-remove-safety-check-menu | Remove safety check menu | No, not desired | N/A |
| 0096-remove-unwanted-account-and-services-section | Remove unwanted account and services section | No, not desired | N/A |
| 0097-remove-translate-offer-preference | Remove translate offer preference | Yes | Disabled in secureblue policies |
| 0098-Hide-Sign-In-preference-when-disallowed | Hide Sign-In preference when disallowed | No, not desired | N/A |
| 0099-Hide-currently-no-op-preload-settings | Hide currently no-op preload settings | No, not desired | N/A |
| 0100-Remove-privacy-trials-preference-UI | Remove privacy trials preference UI | No, not desired | N/A |
| 0101-Remove-privacy-guides-preference-UI | Remove privacy guides preference UI | No, not desired | N/A |
| 0102-Move-search-suggestions-back-to-privacy-section | Move search suggestions back to privacy section | No, not desired | N/A |
| 0103-Toggle-for-closing-tabs-on-exit | Toggle for closing tabs on exit | No, not desired | N/A |
| 0104-Toggle-for-navigating-external-URL-in-incognito | Toggle for navigating external URL in incognito | No, not desired | N/A |
| 0105-Do-not-clear-the-url-bar-on-focus-by-default-for-sea | Do not clear the URL bar on focus by default for search | No, Android only | N/A |
| 0106-Handle-web-search-action-in-browser | Handle web search action in browser | No, Android only | N/A |
| 0107-Support-opening-external-web-search-in-incognito | Support opening external web search in incognito | No, Android only | N/A |
| 0108-Extend-opening-links-from-external-apps-in-incognito | Extend opening links from external apps in incognito for custom tabs | No, Android only | N/A |
| 0109-Extend-opening-links-from-external-apps-in-incognito | Extend opening links from external apps incognito for search tabs | No, Android only | N/A |
| 0110-Extend-opening-links-from-external-apps-in-incognito | Extend opening links from external apps in incognito for share intents | No, Android only | N/A |
| 0111-Do-not-select-search-query-text-when-opening-web-and | Do not select search query text when opening web and | No, Android only | N/A |
| 0112-Implement-UI-for-JIT-site-settings | Implement UI for JIT site settings | Yes | JIT is globally disabled in secureblue config |
| 0113-Implement-UI-for-WebRTC-toggle | Implement UI for WebRTC toggle | No, not desired | N/A |
| 0114-make-cross-origin-referrer-behavior-configurable | Make cross-origin referrer behavior configurable | No, not desired | N/A |
| 0115-Derive-high-entropy-client-hints-with-reduced-user-a | Derive high entropy client hints with reduced user agent | No, fingerprinting related | N/A |
| 0116-temporary-Disable-changes-to-high-entropy-client-hin | Temporary disable changes to high entropy client hints | No, fingerprinting related | N/A |
| 0117-Add-missing-null-check-for-password-manager-autofill | Add missing null check for password manager autofill | No, not desired | N/A |
| 0118-Drop-workaround-with-android-autofill-in-compatibili | Drop workaround with Android autofill in compatibility | No, Android only | N/A |
| 0119-Enable-android-autofill-on-http-authentication-dialo | Enable Android autofill on HTTP authentication dialog | No, Android only | N/A |
| 0120-Enable-usage-of-Android-Autofill-by-default | Enable Android Autofill by default | No, Android only | N/A |
| 0121-Disable-Play-services-dependent-password-manager-pre | Disable Play services dependent password manager | No, Android only | N/A |
| 0122-Use-local-list-of-supported-languages-for-Language-s | Use local list of supported languages for Language settings | Yes | MISSING |
| 0123-Add-an-easily-extensible-way-to-reference-targets-ea | Add an easily extensible way to reference targets easily in ninja | No, not desired | N/A |
| 0124-Add-a-new-config-like-apk-target-for-building | Add a new config-like apk target for building | No, Android only | N/A |
| 0125-config-Directly-reference-config-apk-build-target | Directly reference config apk build target | No, Android only | N/A |
| 0126-config-Generate-ConfigInfo-from-config-apk | Generate ConfigInfo from config apk | No, Android only | N/A |
| 0127-config-Provide-targets-for-linking-and-inclusion-of- | Provide targets for linking and inclusion of ConfigInfo in apk | No, Android only | N/A |
| 0128-config-Include-the-ConfigInfo-class-for-Monochrome-a | Include the ConfigInfo class for Monochrome and Trichrome targets | No, Android only | N/A |
| 0129-config-Include-the-ConfigInfo-class-for-WebView-targ | Include the ConfigInfo class for WebView targets with java code | No, Android only | N/A |
| 0130-config-test-Add-ConfigInfo-on-necessary-integration- | Add ConfigInfo on necessary integration test targets | No, Android only | N/A |
| 0131-config-Add-proto-definitions-for-feature-flags-and-o | Add proto definitions for feature flags and out-of-band component shipping | No, Android only | N/A |
| 0132-config-Add-protobuf-generator-parser-for-config-apk- | Add protobuf generator, parser for config apk contents | No, Android only | N/A |
| 0133-config-generator-Initial-configuration-for-config-ap | Initial configuration for config apk | No, Android only | N/A |
| 0134-config-parser-Add-config-parser-for-browser-and-webv | Add config parser for browser and WebView | No, Android only | N/A |
| 0135-filter-lists-Helper-script-for-fetching-content-filt | Helper script for fetching content filtering... | No, Android only | N/A |
| 0136-config-add-new-needed-deps-to-fetch-filter-lists | Add new needed dependencies to fetch filter lists | No, Android only | N/A |
| 0137-config-Build-target-for-android-assets-including-the | Build target for android assets including the content filtering file | No, Android only | N/A |
| 0138-config-Build-target-for-android-assets-for-config-fi | Build target for android assets for config file protobuf | No, Android only | N/A |
| 0139-config-Add-the-needed-component-and-protobuf-file-fo | Add the needed component and protobuf file for parsing | No, Android only | N/A |
| 0140-Extension-of-build-system-for-java-files-in-base-lay | Extension of build system for java files in base layer | No, Android only | N/A |
| 0141-Add-hooks-for-applying-flags-features-at-runtime | Add hooks for LibraryLoader on early initialization and command line switches | No, Android only | N/A |
| 0142-Add-hooks-for-LibraryLoader-on-early-initialization- | Add hooks for LibraryLoader on early initialization and command line switches | No, Android only | N/A |
| 0143-Add-hooks-for-initializing-contents-of-VanadiumConfi | Add hooks for initializing contents of VanadiumConfig app | No, Android only | N/A |
| 0144-Extension-of-build-system-at-android-specific-subres | Extension of build system at android-specific subresource filter sources | No, Android only | N/A |
| 0145-Expose-fetching-config-state-for-content-filtering-t | Expose fetching config state for content filtering to native calls | No, Android only | N/A |
| 0146-Use-ruleset-from-config-apk-whenever-it-s-present | Use ruleset from config apk whenever it's present | No, Android only | N/A |
| 0147-content-filtering-Add-update-handling-of-subresource | Add update handling of subresource filter component from config apk | No, Android only | N/A |
| 0148-Extension-of-build-system-for-static-library-deps-at | Extension of build system for static library deps at browser layer | No, Android only | N/A |
| 0149-Update-subresource-filter-from-config-apk | Update subresource filter from config apk | No, Android only | N/A |
| 0150-Use-the-content-filtering-from-config-app-when-avail | Use the content filtering from config app when available | No, Android only | N/A |
| 0151-subresource-filter-rules-version-on-about-Vanadium-s | subresource filter rules version on about Vanadium settings page | No, Android only | N/A |
| 0152-don-t-show-subresource-filter-UI-for-site | Don't show subresource filter UI for site | No, Android only | N/A |
| 0153-enable-subresource-filter-on-all-sites | Enable subresource filter on all sites | No, Android only | N/A |
| 0154-Use-the-old-naming-convention-of-Ads-in-ads-site-set | Use the old naming convention of Ads in ads site settings | No, Android only | N/A |
| 0155-config-generator-Always-enable-CredentialManager-API | config-generator: Always enable CredentialManager APIs for all apps | No, Android only | N/A |
| 0156-Enable-CredentialManager-APIs-for-all-apps-supportin | Enable CredentialManager APIs for all apps supporting passkeys | No, Android only | N/A |
| 0157-Add-support-for-calling-added-APIs-from-custom-OS | Add support for calling added APIs from custom OS | No, not desired | N/A |
| 0158-filter-lists-Update-script-to-also-include-saving-sh | filter-lists: Update script to also include saving sha256 digest | No, Android only | N/A |
| 0159-config-Remove-support-for-broadcast-receiver-for-fet | config: Remove support for broadcast receiver for fetching updates in the parser itself | No, Android only | N/A |
| 0160-enable-hybrid-post-quantum-key-exchange-on-Android | enable hybrid post-quantum key exchange on Android | No, android only | N/A |
| 0161-Resolve-more-regex-syntax-warning-for-python-scripts | Resolve more regex syntax warning for python scripts for Python 3.12 | No, not desired | N/A |
| 0162-fix-more-syntax-warnings-in-third_party-jni_zero-for | fix more syntax warnings in //third_party/jni_zero for Python 3.12 | No, not desired | N/A |
| 0163-fix-another-Python-3.12-syntax-warning | fix another Python 3.12 syntax warning | No, not desired | N/A |
| 0164-Revert-Fixit-Update-Password-Manager-to-Google-Passw | Revert "[Fixit] Update Password Manager to Google Password Manager" | No, Android only | N/A |
| 0165-Enable-content-settings-partitioning-by-default | Enable content settings partitioning by default | Yes | Set in secureblue chromium.conf |
| 0166-Match-skipping-compatibility-check-default-value-che | Match skipping compatibility check default value checks in | ||
| java as well | No, Android only | N/A | |
| 0167-Set-Toolbar-shortcut-default-to-new-tab-instead-of-a | Set Toolbar shortcut default to new tab instead of auto | No, Android only | N/A |
| 0168-temp-config-generator-Forcibly-skip-checks-for-andro | temp: config-generator: Forcibly skip checks for android | No, Android only | N/A |
| 0169-temp-config-generator-Forcibly-disable-translate-opt | temp: config-generator: Forcibly disable translate option on | ||
| toolbar shortcut options | No, Android only | N/A | |
| 0170-Revert-M122-content-make-disable-jit-actually-disabl | Revert "[M122] content: make disable-jit actually disable | ||
| high-tier v8 compilers" | Yes | Set in secureblue chromium.conf | |
| 0171-config-parser-Add-support-for-conditional-parsing-of | config-parser: Add support for conditional parsing of | ||
| portions of config app | No, Android only | N/A | |
| 0172-config-Add-new-definitions-for-additional-components | config: Add new definitions for additional components and its | ||
| conditions | No, Android only | N/A | |
| 0173-config-Add-support-for-generating-configs-with-addit | config: Add support for generating configs with additional components and its condition | No, Android only | N/A |
| 0174-config-parser-add-support-for-parsing-conditional-co | config-parser: add support for parsing conditional components | No, Android only | N/A |
| 0175-Add-a-method-to-hook-at-Application.attachBaseContex | Add a method to hook at Application.attachBaseContext() call | No, Android only | N/A |
| 0176-Add-hooks-for-ChromeApplicationImpl-to-initialize-co | Add hooks for ChromeApplicationImpl to initialize conditionals for config app | No, Android only | N/A |
| 0177-content-filtering-Add-support-for-updating-content-f | content-filtering: Add support for updating content filtering | ||
| when accept-language is changed | No, Android only | N/A | |
| 0178-Add-support-for-conditional-content-filtering-compon | Add support for conditional content filtering component based | ||
| on language settings | No, Android only | N/A | |
| 0179-add-support-for-german-specific-langauge-content-fil | add support for german-specific langauge content filtering | ||
| when German language is set | No, Android only | N/A | |
| 0180-temporary-config-disable-conditional-component-if-de | temporary: config: disable conditional component if declared | ||
| such in config holder app | No, Android only | N/A |