search

Alex313031 / thorium

Chromium fork named after radioactive element No. 90. Windows and MacOS/Raspi/Android/Special builds are in different repositories, links are towards the top of the README.md.
https://thorium.rocks/
BSD 3-Clause "New" or "Revised" License
4.69k stars 145 forks source link

Patch of Javascript JIT (block JIT and webassembly) , Webgl, Webrtc, viewport size protection, timezone override #231

Open trimechee opened 11 months ago

trimechee commented 11 months ago

Hello, i already explain why webgl and webassembly may be dangerous, and I am testing open source "Cromite browser" last version and I discover these important settings in site settings : chrome://settings/content :

Javascript JIT(block JIT and webassembly) Webgl, Webrtc viewport size protection timezone override

Si, i can finallly disable easily and quickly webassembly and webgl without digging into the various complicated flags....

I hope these patches will be added to our beloved Thorium Browser please ! Thank you so much :)

gz83 commented 11 months ago

Thank you for your suggestion, but judging from the demand in the community, it seems that the demand for these features is not strong.

@trimechee

trimechee commented 11 months ago

@gz83 Thank you for listening to my request :) We hope amazing Thorium community will demand these features in sha Allah :)

trimechee commented 11 months ago

Hello @gz83 , if we can disable webasembly with flags , probably I would not have asked for this option, I use the flag --js-flags=--noexpose_wasm but this no longer seems effective, for webgl, it's easy, we can add --disable-webgl --disable-3d-apis , but for webassembly, it's much more complicated and the flags seem old and dated, hence my request, thank you!

trimechee commented 11 months ago

and the famous microsoft edge browser has option in security settings to strengthen security by disabling webassembly, microsoft engineers have done a lot of testing and know that this feature can be very dangerous for our data, which is why they added the feature to disable wasm !

trimechee commented 11 months ago

I was looking for a new browser that deactivates webassembly and webgl and which is executable because cromite browser does not have aN executable version only portable and I discovered that chromium made by Mr Macchrome also incorporated this option... .maybe it can help to incorporate this option into Thorium.....

https://github.com/macchrome/winchrome/releases/tag/v118.5993.71-M118.0.5993.71-r1192594-Win64

trimechee commented 6 months ago

Hello Mr @Alex313031 and Mr @gz83 , I am happy to learn about the addition in Thorium of the option : V8 optimizer JavaScript and WebAssembly engine used to improve site performance option ! Thank you ! 💯 🥇

So if I understand correctly the : chrome://settings/content/v8 option allows you to disable wasm webassembly? If so, it’s so wonderful, thank you!

All that remains is please add an option to hide our IP address when using webrtc or option to completely deactivate webrtc because webrtc reveals our ip address even when using a vpn, thank you very much!

microsoft edge browser has a flag : Anonymize local IPs exposed by WebRTC. Conceal local IP addresses with mDNS hostnames. – Mac, Windows, Linux

and opera and brave browsers have an option to hide the ip address when using webrtc....