ungoogled-software/ungoogled-chromium

Option to disable webassembly and webgl for security reasons : implement patch of Javascript JIT (block JIT and webassembly) , Webgl, Webrtc, viewport size protection, timezone override

Open

#2,604 建立於 2023年11月10日

在 GitHub 查看
 (7 留言) (0 反應) (0 負責人)Python (771 fork)batch import
enhancementhelp wanted

倉庫指標

Star
 (18,674 star)
PR 合併指標
 (平均合併 1天 11小時) (30 天內合併 9 個 PR)

描述

Description

Impossible to disable completely risky webassembly wasm

Who's implementing?

  • I'm willing to implement this feature myself

The problem

EDIT : We are happy to learn about the addition in Ungoogled-Chromium of the option : V8 optimizer JavaScript and WebAssembly engine used to improve site performance option ! Thank you ! 💯 🥇

So if I understand correctly the : chrome://settings/content/v8 option allows you to disable wasm webassembly? If so, it’s so wonderful, thank you!

All that remains is please add an option to hide our IP address when using webrtc or option to completely deactivate webrtc because webrtc reveals our ip address even when using a vpn, thank you very much!

microsoft edge browser has a flag : Anonymize local IPs exposed by WebRTC. Conceal local IP addresses with mDNS hostnames. – Mac, Windows, Linux

and opera and brave browsers have an option to hide the ip address when using webrtc....


Hello, webgl and webassembly may be dangerous and risky :

https://github.com/stevespringett/disable-webassembly#security-considerations

https://security.stackexchange.com/questions/13799/is-webgl-a-security-concern

and I tested open source "Cromite browser" last version

https://github.com/uazo/cromite

and I discover these important settings in site settings : chrome://settings/content :

Javascript JIT(block JIT and webassembly) Webgl, Webrtc viewport size protection timezone override

Si, i can finallly disable easily and quickly webassembly and webgl without digging into the various complicated flags....

I hope these important patches will be added to our beloved Ungoogled-Chromium Browser please ! Thank you so much :)

Possible solutions

Implement features patches from cromite browser to disable risky webassembly and webgl

Alternatives

No response

Additional context

No response

貢獻者指南