mirror of
https://github.com/optim-enterprises-bv/secureblue.git
synced 2025-11-06 05:17:45 +00:00
40 KiB
40 KiB
A list of Vanadium patches and their secureblue counterpart (if any).
| Vanadium patch | Patch description | Relevance | Counterpart |
|---|---|---|---|
| 0001-Vanadium-string-rebranding | Adjust strings to reflect Vanadium branding | No, branding related | N/A |
| 0002-Vanadium-branding | Apply branding changes specific to Vanadium | No, branding related | N/A |
| 0003-Vanadium-branding-for-WebView | Apply branding changes specific to Vanadium for the WebView | No, branding related | N/A |
| 0004-Support-for-extended-version-name-and-increments | Add support for extended version names and increments | No, not desired | N/A |
| 0005-temporary-Workaround-for-crashes-at-StackTrace-calls | Temporary workaround for crashes at StackTrace calls | No, not desired | N/A |
| 0006-use-64-bit-WebView-processes | Forbid use of 32-bit ABI in WebView | No, Android only | N/A |
| 0007-switch-to-fstack-protector-strong | Use -fstack-protector-strong cflag | Yes | Set in upstream Fedora |
| 0008-enable-fwrapv-in-Clang-for-non-UBSan-builds | Set -fwrapv to make signed integer overflow defined behavior to improve memory safety | Yes | Set in upstream Fedora |
| 0009-enable-ftrivial-auto-var-init-zero | Set -ftrivial-auto-var-init=zero to force clang to initialize automatic variables with zeroes | Yes | Set in upstream Fedora |
| 0010-disable-broken-warning-for-auto-var-init | Minor fix related to the prior patch | No, not desired | N/A |
| 0011-Checkout-PGO-profiles | Checkout PGO profiles | No, not desired | N/A |
| 0012-disable-checkout_nacl | Disables checking out nacl | Yes | nacl is disabled in upstream Fedora |
| 0013-disable-first-run-welcome-page | Disable first-run welcome page | No, branding related | N/A |
| 0014-disable-seed-based-field-trials | Disable seed-based field trials (variations) | Yes | Disabled in secureblue policies for everything except critical fixes |
| 0015-disable-fetching-variations | Disable fetching variations | Yes | Disabled in secureblue policies for everything except critical fixes |
| 0016-disable-WebView-variations-support | Disable WebView variations support | No, Android only | N/A |
| 0017-disable-navigation-error-correction-by-default | Disable navigation error correction by default | Yes | Disabled in secureblue policies |
| 0018-disable-contextual-search-by-default | Disable contextual search by default | No, Android only | N/A |
| 0019-disable-network-prediction-by-default | Disable network prediction by default | Yes | Disabled in secureblue policies |
| 0020-disable-metrics-by-default | Disable metrics by default | Yes | Disabled in secureblue policies |
| 0021-disable-hyperlink-auditing-by-default | Disable hyperlink auditing by default | Yes | Set in secureblue chromium.conf |
| 0022-disable-showing-popular-sites-by-default | Disable showing popular sites by default | Yes | Set in secureblue chromium.conf |
| 0023-disable-article-suggestions-feature-by-default | Disable article suggestions feature by default | Yes | MISSING |
| 0024-disable-content-feed-suggestions-by-default | Disable content feed suggestions by default | Yes | Set in secureblue chromium.conf |
| 0025-disable-sensors-access-by-default | Disable sensors access by default | Yes | Disabled in secureblue policies |
| 0026-block-playing-protected-media-by-default | Block playing protected media by default | Yes | MISSING |
| 0027-disable-third-party-cookies-by-default | Disable third-party cookies by default | Yes | Disabled in secureblue policies |
| 0028-disable-background-sync-by-default | Disable background sync by default | No, not desired | N/A |
| 0029-disable-payment-support-by-default | Disable payment support by default | Yes | Disabled in secureblue policies |
| 0030-disable-media-router-media-remoting-by-default | Disable media router media remoting by default | Yes | Disabled in secureblue policies |
| 0031-disable-media-router-by-default | Disable media router by default | Yes | Disabled in secureblue policies |
| 0032-disable-offering-translations-by-default | Disable offering translations by default | Yes | Disabled in secureblue policies |
| 0033-disable-browser-sign-in-feature-by-default | Disable browser sign-in feature by default | Yes | Disabled in secureblue policies |
| 0034-disable-browser-autologin-by-default | Disable browser autologin feature by default | Yes | Disabled in secureblue policies |
| 0035-disable-safe-browsing-reporting-opt-in-by-default | Disable safe browsing reporting opt-in by default | Yes | Disabled in secureblue policies |
| 0036-disable-unused-safe-browsing-option-by-default | Disable safe browsing due to lack of Play Services | No, Android only | N/A |
| 0037-disable-media-DRM-preprovisioning-by-default | Disables media DRM preprovisioning | Yes | Set in secureblue chromium.conf |
| 0038-disable-autofill-server-communication-by-default | Disables autofill server communication | Yes | Set in secureblue chromium.conf |
| 0039-disable-component-updater-pings-by-default | Disables component updater pings | Yes | MISSING |
| 0040-disable-search-provider-logo | Disables search provider logo | No, branding related | N/A |
| 0041-disable-trivial-subdomain-hiding | Disables trivial subdomain hiding | Yes | MISSING |
| 0042-disable-learn-more-link-in-incognito-new-tab | Disables learn more link in incognito new tab | No, branding related | N/A |
| 0043-disable-Omaha-update-check-support | Disables Omaha update check support | No, not desired | N/A |
| 0044-disable-GaiaAuthFetcher-code-due-to-upstream-bug | Disables GaiaAuthFetcher code due to upstream bug | No, not desired | N/A |
| 0045-Disable-adding-a-signed-out-avatar-on-new-tab-pages- | Disables adding a signed-out avatar on new tab pages | No, not desired | N/A |
| 0046-Disable-newer-privacy-sandbox-features-by-default | Disables newer privacy sandbox features | Yes | Set in secureblue chromium.conf |
| 0047-Disable-WebGPU-in-Android-by-default | Disables WebGPU in Android | No, Android only | N/A |
| 0048-always-use-local-new-tab-page | Always use local new tab page | No, not desired | N/A |
| 0049-mark-non-secure-origins-as-dangerous | Marks non-secure origins as dangerous | Yes | MISSING |
| 0050-most-private-WebRTC-IP-handling-policy-by-default | Most private WebRTC IP handling policy by default | Yes | Set in secureblue policies |
| 0051-stub-out-the-battery-status-API | Stubs out the battery status API | No, Android only | N/A |
| 0052-stop-ignoring-download-location-prompt-setting | Stops ignoring download location prompt setting | No, Android only | N/A |
| 0053-show-download-prompt-again-by-default | Shows download prompt again by default | No, Android only | N/A |
| 0054-disable-trials-of-privacy-aware-analytics-advertisin | Disables trials of privacy-aware analytics advertising | Yes | MISSING |
| 0055-disable-using-Play-services-fonts | Disables using Play services fonts | No, Android only | N/A |
| 0056-disable-appending-variations-header | Disables appending variations header | No, not desired | N/A |
| 0057-Disable-detailed-language-settings-by-default | Disables detailed language settings by default | No, not desired | N/A |
| 0058-disable-fetching-optimization-guides-by-default | Disables fetching optimization guides by default | No, not desired | N/A |
| 0059-set-default-search-engine-to-DuckDuckGo | Sets default search engine to DuckDuckGo | No, not desired | N/A |
| 0060-set-original-package-to-org.chromium.chrome | Sets original package to org.chromium.chrome | No, Android only | N/A |
| 0061-Make-HTTPS-only-mode-the-default | Makes HTTPS-only mode the default | Yes | Set in secureblue policies |
| 0062-require-HTTPS-for-component-updates | Requires HTTPS for component updates | Yes | MISSING |
| 0063-use-vanadium.app-for-component-updates | Use vanadium.app for component updates | No, not desired | N/A |
| 0064-use-grapheneos.network-when-verifying-DNS-over-HTTPS | Use grapheneos.network when verifying DNS over HTTPS | No, not desired | N/A |
| 0065-Use-GrapheneOS-connectivity-check-as-well-for-Help-a | Use GrapheneOS connectivity check as well for Help | No, not desired | N/A |
| 0066-enable-memory-tagging-in-all-processes | Enable memory tagging in all processes | No, Android only | N/A |
| 0067-bugfix-do-not-attempt-to-re-enable-memory-tagging | Bugfix: do not attempt to re-enable memory tagging | No, Android only | N/A |
| 0068-enable-prefetch-privacy-changes-by-default | Enable prefetch privacy changes by default | Yes | Set in secureblue chromium.conf |
| 0069-enable-split-cache-by-default | Enable split cache by default | Yes | Set in secureblue chromium.conf |
| 0070-enable-partitioning-connections-by-default | Enable partitioning connections by default | Yes | Set in secureblue chromium.conf |
| 0071-enable-dubious-Do-Not-Track-feature-by-default | Enable dubious Do Not Track feature by default | No, not desired | N/A |
| 0072-enable-strict-site-isolation-by-default-on-Android | Enable strict site isolation by default on Android | No, Android only | N/A |
| 0073-Enable-strict-origin-isolation-by-default | Enable strict origin isolation by default | Yes | Set in secureblue chromium.conf |
| 0074-Enable-reduce-accept-language-header-by-default | Enable reduce accept language header by default | No, fingerprinting related | N/A |
| 0075-enable-process-isolated-sandboxed-iframes-by-default | Enable process isolated sandboxed iframes by default | Yes | Set in secureblue chromium.conf |
| 0076-use-Google-Chrome-branding-for-client-hints | Use Google Chrome branding for client hints | No, fingerprinting related | N/A |
| 0077-add-trichrome-browser-apk-targets | Add trichrome browser APK targets | No, Android only | N/A |
| 0078-Remove-logo-from-chrome-version | Remove logo from Chrome version | No, Android only | N/A |
| 0079-redirect-settings-help-icon | Redirect settings help icon | No, branding related | N/A |
| 0080-remove-Google-prefix-from-storage-settings-label | Remove Google prefix from storage settings label | No, branding related | N/A |
| 0081-remove-Help-feedback-menu-entry | Remove Help feedback menu entry | No, Android only | N/A |
| 0082-hide-passwords.google.com-link-when-not-supported | Hide passwords.google.com link when not supported | No, Android only | N/A |
| 0083-update-trichrome_library_apk-expectation-file | Update trichrome_library_apk expectation file | No, Android only | N/A |
| 0084-Consolidate-downstream-changes-in-dependencies-sourc | Consolidate downstream changes in dependencies source | No, Android only | N/A |
| 0085-Consolidate-downstream-strings-in-a-separate-file-fo | Consolidate downstream strings in a separate file | No, branding related | N/A |
| 0086-Utility-class-for-adding-shared-preference-keys | Utility class for adding shared preference keys | No, Android only | N/A |
| 0087-Helper-class-for-modifying-preferences-at-chrome-lay | Helper class for modifying preferences at Chrome layer | No, Android only | N/A |
| 0088-Utility-class-for-modifying-preferences-at-Privacy-s | Utility class for modifying preferences at Privacy settings layer | No, Android only | N/A |
| 0089-Remove-not-applicable-additional-terms-of-services | Remove not applicable additional terms of services | No, branding related | N/A |
| 0090-remove-Google-terms-of-use-and-privacy-policy | Remove Google terms of use and privacy policy | No, branding related | N/A |
| 0091-disable-unused-password-check-feature | Disable unused password check feature | No, Android only | N/A |
| 0092-remove-unwanted-sync-and-services-link | Remove unwanted sync and services link | No, branding related | N/A |
| 0093-remove-safety-check-menu | Remove safety check menu | No, not desired | N/A |
| 0094-remove-unwanted-account-and-services-section | Remove unwanted account and services section | No, not desired | N/A |
| 0095-remove-translate-offer-preference | Remove translate offer preference | Yes | Disabled in secureblue policies |
| 0096-Hide-Sign-In-preference-when-disallowed | Hide Sign-In preference when disallowed | No, not desired | N/A |
| 0097-Hide-currently-no-op-preload-settings | Hide currently no-op preload settings | No, not desired | N/A |
| 0098-Remove-privacy-trials-preference-UI | Remove privacy trials preference UI | No, not desired | N/A |
| 0099-Remove-privacy-guides-preference-UI | Remove privacy guides preference UI | No, not desired | N/A |
| 0100-Move-search-suggestions-back-to-privacy-section | Move search suggestions back to privacy section | No, not desired | N/A |
| 0101-Toggle-for-closing-tabs-on-exit | Toggle for closing tabs on exit | No, not desired | N/A |
| 0102-Toggle-for-navigating-external-URL-in-incognito | Toggle for navigating external URL in incognito | No, not desired | N/A |
| 0103-Implement-UI-for-JIT-site-settings | Implement UI for JIT site settings | Yes | JIT is globally disabled in secureblue config |
| 0104-Implement-UI-for-WebRTC-toggle | Implement UI for WebRTC toggle | No, not desired | N/A |
| 0105-Do-not-clear-the-url-bar-on-focus-by-default-for-sea | Do not clear the URL bar on focus by default for search | No, Android only | N/A |
| 0106-Handle-web-search-action-in-browser | Handle web search action in browser | No, Android only | N/A |
| 0107-Support-opening-external-web-search-in-incognito | Support opening external web search in incognito | No, Android only | N/A |
| 0108-Add-missing-null-check-for-password-manager-autofill | Add missing null check for password manager autofill | No, not desired | N/A |
| 0109-make-cross-origin-referrer-behavior-configurable | Make cross-origin referrer behavior configurable | No, not desired | N/A |
| 0110-Derive-high-entropy-client-hints-with-reduced-user-a | Derive high entropy client hints with reduced user agent | No, fingerprinting related | N/A |
| 0111-temporary-Disable-changes-to-high-entropy-client-hin | Temporary disable changes to high entropy client hints | No, fingerprinting related | N/A |
| 0112-Drop-workaround-with-android-autofill-in-compatibili | Drop workaround with Android autofill in compatibility | No, Android only | N/A |
| 0113-Enable-android-autofill-on-http-authentication-dialo | Enable Android autofill on HTTP authentication dialog | No, Android only | N/A |
| 0114-Enable-usage-of-Android-Autofill-by-default | Enable Android Autofill by default | No, Android only | N/A |
| 0115-Disable-Play-services-dependent-password-manager-pre | Disable Play services dependent password manager | No, Android only | N/A |
| 0116-Use-local-list-of-supported-languages-for-Language-s | Use local list of supported languages for Language settings | Yes | MISSING |
| 0117-Extend-opening-links-from-external-apps-in-incognito | Extend opening links from external apps in incognito for custom tabs | No, Android only | N/A |
| 0118-Extend-opening-links-from-external-apps-in-incognito | Extend opening links from external apps incognito for search tabs | No, Android only | N/A |
| 0119-Extend-opening-links-from-external-apps-in-incognito | Extend opening links from external apps in incognito for share intents | No, Android only | N/A |
| 0120-temporary-Always-partition-third-party-storage | Temporary always partition third-party storage | Yes | Set in secureblue chromium.conf |
| 0121-Do-not-select-search-query-text-when-opening-web-and | Do not select search query text when opening web and | No, Android only | N/A |
| 0122-Add-an-easily-extensible-way-to-reference-targets-ea | Add an easily extensible way to reference targets easily in ninja | No, not desired | N/A |
| 0123-Add-a-new-config-like-apk-target-for-building | Add a new config-like apk target for building | No, Android only | N/A |
| 0124-config-Directly-reference-config-apk-build-target | Directly reference config apk build target | No, Android only | N/A |
| 0125-config-Generate-ConfigInfo-from-config-apk | Generate ConfigInfo from config apk | No, Android only | N/A |
| 0126-config-Provide-targets-for-linking-and-inclusion-of- | Provide targets for linking and inclusion of ConfigInfo in apk | No, Android only | N/A |
| 0127-config-Include-the-ConfigInfo-class-for-Monochrome-a | Include the ConfigInfo class for Monochrome and Trichrome targets | No, Android only | N/A |
| 0128-config-Include-the-ConfigInfo-class-for-WebView-targ | Include the ConfigInfo class for WebView targets with java code | No, Android only | N/A |
| 0129-config-test-Add-ConfigInfo-on-necessary-integration- | Add ConfigInfo on necessary integration test targets | No, Android only | N/A |
| 0130-config-Add-proto-definitions-for-feature-flags-and-o | Add proto definitions for feature flags and out-of-band component shipping | No, Android only | N/A |
| 0131-config-Add-protobuf-generator-parser-for-config-apk- | Add protobuf generator, parser for config apk contents | No, Android only | N/A |
| 0132-config-Initial-configuration-for-config-apk | Initial configuration for config apk | No, Android only | N/A |
| 0133-config-Add-config-parser-for-browser-and-webview | Add config parser for browser and WebView | No, Android only | N/A |
| 0134-config-Helper-script-for-fetching-content-filtering- | Helper script for fetching content filtering... | No, Android only | N/A |
| 0135-config-add-new-needed-deps-to-fetch-filter-lists | Add new needed dependencies to fetch filter lists | No, Android only | N/A |
| 0136-config-Build-target-for-android-assets-including-the | Build target for android assets including the content filtering file | No, Android only | N/A |
| 0137-config-Build-target-for-android-assets-for-config-fi | Build target for android assets for config file protobuf | No, Android only | N/A |
| 0138-config-Add-the-needed-component-and-protobuf-file-fo | Add the needed component and protobuf file for parsing | No, Android only | N/A |
| 0139-Extension-of-build-system-for-java-files-in-base-lay | Extension of build system for java files in base layer | No, Android only | N/A |
| 0140-Add-hooks-for-LibraryLoader-on-early-initialization- | Add hooks for LibraryLoader on early initialization and command line switches | No, Android only | N/A |
| 0141-Add-hooks-for-initializing-contents-of-VanadiumConfi | Add hooks for initializing contents of VanadiumConfig app | No, Android only | N/A |
| 0142-Extension-of-build-system-at-android-specific-subres | Extension of build system at android-specific subresource filter sources | No, Android only | N/A |
| 0143-Expose-fetching-config-state-for-content-filtering-t | Expose fetching config state for content filtering to native calls | No, Android only | N/A |
| 0144-Use-ruleset-from-config-apk-whenever-it-s-present | Use ruleset from config apk whenever it's present | No, Android only | N/A |
| 0145-Add-update-handling-of-subresource-filter-component- | Add update handling of subresource filter component from config apk | No, Android only | N/A |
| 0146-Extension-of-build-system-for-static-library-deps-at | Extension of build system for static library deps at browser layer | No, Android only | N/A |
| 0147-Update-subresource-filter-from-config-apk | Update subresource filter from config apk | No, Android only | N/A |
| 0148-Use-the-content-filtering-from-config-app-when-avail | Use the content filtering from config app when available | No, Android only | N/A |
| 0149-subresource-filter-rules-version-on-about-Vanadium-s | subresource filter rules version on about Vanadium settings page | No, Android only | N/A |
| 0150-don-t-show-subresource-filter-UI-for-site | Don't show subresource filter UI for site | No, Android only | N/A |
| 0151-enable-subresource-filter-on-all-sites | Enable subresource filter on all sites | No, Android only | N/A |
| 0152-Use-the-old-naming-convention-of-Ads-in-ads-site-set | Use the old naming convention of Ads in ads site settings | No, Android only | N/A |
| 0153-Always-enable-CredentialManager-APIs-for-all-apps | Use the old naming convention of Ads in ads site settings | No, Android only | N/A |