Chromium-based browser support

[DemiMarie]

Chromium-based browsers have security advantages compared to Firefox. In particular, the security of Firefox on Android is horrible because of a complete lack of sandboxing.

[lsd-cat]

Sadly I do agree security wise, but we had no choice partially because Tor Browser is a priority, but also because this type of work, as an extension, afaik is not possible in anything Chromium-based due to the move to deprecate manifest V2 extensions.

[DemiMarie]

I believe even if it was supported, there would still be race conditions at process startup to deal with. I filed secureblue/Trivalent#249 for blocking WebRequest in Trivalent (a hardened Chromium fork) but that does not solve the race conditions.

[DemiMarie]

Looks like MV3 still allows blocking WebRequest if the extension is installed via policy. This could be automated for extensions installed via a system package manager. The concerns about race conditions are still valid.

[lsd-cat]

Thanks for digging this! To be honest, I'm not sure whether extensions could be raced in Firefox either. It's on the TODO list of things to investigate before an alpha version.