Take back your browser with Bromite, a Chromium fork with ad blocking and privacy enhancements!
The main goal is to provide a no-clutter browsing experience without privacy-invasive features, as well as fast ad-blocking.
A few UI changes are made to curb the use of the browser as a platform for advertisements.
To enable the use of other open-source projects, all patches are published under the GNU/GPL v3 license.
Features of Bromite APK
- Customizable adblock filters via user-provided
- Automatically updated adblock filters
- Remove click-tracking and AMP from search results
- DNS-over-HTTPS support with any valid IETF DoH endpoint
- Always-incognito mode
- Disable all field trials permanently
- Disable smart search by default, allow web search from incognito mode
- Always-visible cookies, javascript, and ads site settings from the address bar popup
- Remove Play integration binary blobs
- Use CFI on all architectures except x86
- Enable trivial auto var init
- Disable media router and remoting by default
- Disable dynamic module loading
- Show warnings for TLSv1.0/TLSv1.1 pages
- Enable site-per-process isolation for all devices with memory > 1GB
- Completely remove safe browsing and other privacy-unfriendly features
- Proxy configuration page with PAC and custom proxy lists support
- Settings to disable custom intents and clear session on exit
- Flags to toggle anti-fingerprinting mitigations for canvas, audio, client reacts, webGL, and sensor APIs (see full list below for all the new flags)
- Use frozen User-Agent to conceal real model and browser version
- Privacy enhancement patches from Iridium, Inox patchset, Brave, and ungoogled-chromium projects
- Security enhancement patches from the GrapheneOS project
- Disable scroll-to-text-fragment
- Reduced referer granularity
- Block gateway attacks via WebSockets (partial fix, see this upstream issue)
- Use 64-bit ABI for review processes
- Ignore enterprise policies that disallow secure DNS
- Ask permission to play protected media
- Disable the DIAL repeating discovery
- Disable RTCGetCurrentBrowsingContextMedia by default
- Disable FLoC and privacy sandbox by default
- Disable feeds
- Disable reporting of certificate errors
- Use a pre-defined phone model for client hints and Javascript
- Allow forcing external links to open in incognito
- Disable AGSA by default
- Flag to enable Certificate Transparency
- Allow adding search engines from incognito mode
- Disable predictors
- Disable supervised users
- Disable safety check
- Disable the capability to block view-source: URLs
- Disable SegmentationPlatformFeature, OptimizationHints, client hint headers
- Disable AsyncDNS by default
- Customize history expiration threshold
- Disable idle detection
- HTTPS-only mode enabled by default
- Disable TLS resumption by default
- Partition DoH requests by top-frame NIK
- Strict site isolation and strict origin isolation
