Option to disable webassembly and webgl for security reasons : implement patch of Javascript JIT (block JIT and webassembly) , Webgl, Webrtc, viewport size protection, timezone override
#2,604 创建于 2023年11月10日
仓库指标
- Star
- (18,674 star)
- PR 合并指标
- (平均合并 1天 11小时) (30 天内合并 9 个 PR)
描述
Description
Impossible to disable completely risky webassembly wasm
Who's implementing?
- I'm willing to implement this feature myself
The problem
EDIT : We are happy to learn about the addition in Ungoogled-Chromium of the option : V8 optimizer JavaScript and WebAssembly engine used to improve site performance option ! Thank you ! 💯 🥇
So if I understand correctly the : chrome://settings/content/v8 option allows you to disable wasm webassembly? If so, it’s so wonderful, thank you!
All that remains is please add an option to hide our IP address when using webrtc or option to completely deactivate webrtc because webrtc reveals our ip address even when using a vpn, thank you very much!
microsoft edge browser has a flag : Anonymize local IPs exposed by WebRTC. Conceal local IP addresses with mDNS hostnames. – Mac, Windows, Linux
and opera and brave browsers have an option to hide the ip address when using webrtc....
Hello, webgl and webassembly may be dangerous and risky :
https://github.com/stevespringett/disable-webassembly#security-considerations
https://security.stackexchange.com/questions/13799/is-webgl-a-security-concern
and I tested open source "Cromite browser" last version
https://github.com/uazo/cromite
and I discover these important settings in site settings : chrome://settings/content :
Javascript JIT(block JIT and webassembly) Webgl, Webrtc viewport size protection timezone override
Si, i can finallly disable easily and quickly webassembly and webgl without digging into the various complicated flags....
I hope these important patches will be added to our beloved Ungoogled-Chromium Browser please ! Thank you so much :)
Possible solutions
Implement features patches from cromite browser to disable risky webassembly and webgl
Alternatives
No response
Additional context
No response