diff options
| author | Daniel Micay <daniel.micay@grapheneos.org> | 2024-08-14 18:11:53 -0400 |
|---|---|---|
| committer | Daniel Micay <daniel.micay@grapheneos.org> | 2024-08-14 18:11:53 -0400 |
| commit | 12b8a9fc0976dc18a2e397560a5f7742d406950e (patch) | |
| tree | 9df9a00a969bc57c6b1fdb9ac9fbc8f10d15496e | |
| parent | 661493861af0fa39d7fc4bb99861c18e5b10117b (diff) | |
reorganize Vanadium compiler hardening features
| -rw-r--r-- | static/features.html | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/static/features.html b/static/features.html index 0003ec54..1c424700 100644 --- a/static/features.html +++ b/static/features.html @@ -943,9 +943,12 @@ <p>Some of the features added compared to standard mobile Chromium:</p> <ul> + <li>Hardware memory tagging (MTE) enabled for the main allocator</li> <li>Type-based Control Flow Integrity (CFI)</li> <li>Shadow Call Stack</li> - <li>Hardware memory tagging (MTE) enabled for the main allocator</li> + <li>Strong stack protector</li> + <li>Automatic zero-initialized variables</li> + <li>Well-defined signed overflow</li> <li>Strict site isolation and sandboxed iframes</li> <li>JavaScript JIT disabled by default with per-site toggle via drop-down permission menu</li> @@ -953,8 +956,6 @@ Play for autofill support</li> <li>WebGPU disabled for attack surface reduction</li> <li>WebRTC IP handling policy toggle to control peer-to-peer WebRTC mode</li> - <li>Compiler hardening: automatic variable initialization, strong stack - protector, well-defined signed overflow</li> <li>High performance content filtering engine using EasyList + EasyPrivacy with per-site toggle via drop-down permission menu</li> <li>More complete state partitioning without origin trial opt-out</li> |