security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

reorganize Vanadium compiler hardening features

Browse Source
This commit is contained in:
Daniel Micay 2024-08-14 18:11:53 -04:00
parent 661493861a
commit 12b8a9fc09
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
static/features.html
View File

@ -943,9 +943,12 @@
<p>Some of the features added compared to standard mobile Chromium:</p>
<ul>
<li>Hardware memory tagging (MTE) enabled for the main allocator</li>
<li>Type-based Control Flow Integrity (CFI)</li>
<li>Shadow Call Stack</li>
<li>Hardware memory tagging (MTE) enabled for the main allocator</li>
<li>Strong stack protector</li>
<li>Automatic zero-initialized variables</li>
<li>Well-defined signed overflow</li>
<li>Strict site isolation and sandboxed iframes</li>
<li>JavaScript JIT disabled by default with per-site toggle via drop-down
permission menu</li>
@ -953,8 +956,6 @@
Play for autofill support</li>
<li>WebGPU disabled for attack surface reduction</li>
<li>WebRTC IP handling policy toggle to control peer-to-peer WebRTC mode</li>
<li>Compiler hardening: automatic variable initialization, strong stack
protector, well-defined signed overflow</li>
<li>High performance content filtering engine using EasyList + EasyPrivacy
with per-site toggle via drop-down permission menu</li>
<li>More complete state partitioning without origin trial opt-out</li>