ungoogled-software/ungoogled-chromium

Option to disable webassembly and webgl for security reasons : implement patch of Javascript JIT (block JIT and webassembly) , Webgl, Webrtc, viewport size protection, timezone override

Open

#2,604 创建于 2023年11月10日

在 GitHub 查看
 (7 评论) (0 反应) (0 负责人)Python (771 fork)batch import
enhancementhelp wanted

仓库指标

Star
 (18,674 star)
PR 合并指标
 (平均合并 1天 11小时) (30 天内合并 9 个 PR)

描述

Description

Impossible to disable completely risky webassembly wasm

Who's implementing?

  • I'm willing to implement this feature myself

The problem

EDIT : We are happy to learn about the addition in Ungoogled-Chromium of the option : V8 optimizer JavaScript and WebAssembly engine used to improve site performance option ! Thank you ! 💯 🥇

So if I understand correctly the : chrome://settings/content/v8 option allows you to disable wasm webassembly? If so, it’s so wonderful, thank you!

All that remains is please add an option to hide our IP address when using webrtc or option to completely deactivate webrtc because webrtc reveals our ip address even when using a vpn, thank you very much!

microsoft edge browser has a flag : Anonymize local IPs exposed by WebRTC. Conceal local IP addresses with mDNS hostnames. – Mac, Windows, Linux

and opera and brave browsers have an option to hide the ip address when using webrtc....


Hello, webgl and webassembly may be dangerous and risky :

https://github.com/stevespringett/disable-webassembly#security-considerations

https://security.stackexchange.com/questions/13799/is-webgl-a-security-concern

and I tested open source "Cromite browser" last version

https://github.com/uazo/cromite

and I discover these important settings in site settings : chrome://settings/content :

Javascript JIT(block JIT and webassembly) Webgl, Webrtc viewport size protection timezone override

Si, i can finallly disable easily and quickly webassembly and webgl without digging into the various complicated flags....

I hope these important patches will be added to our beloved Ungoogled-Chromium Browser please ! Thank you so much :)

Possible solutions

Implement features patches from cromite browser to disable risky webassembly and webgl

Alternatives

No response

Additional context

No response

贡献者指南