~kris/dots

srice

srice/.config/chromium/launch-hardened.sh -rwxr-xr-x 1.4 KiB
e98f3b03 — Kris Yotam chore: sync local state after restore (push updates, no pull) a month ago 
                                                                                
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44

#!/bin/sh
# launch-hardened.sh -- Launch Chromium with all hardening flags
# Usage: ./launch-hardened.sh [additional-args]

CHROME_BIN="${CHROME_BIN:-/usr/bin/chromium}"

exec "$CHROME_BIN" \
  --disable-background-networking \
  --disable-breakpad \
  --disable-crash-reporter \
  --disable-default-apps \
  --disable-extensions-file-access-check \
  --disable-webgl \
  --disable-3d-apis \
  --disable-reading-from-canvas \
  --disable-client-side-phishing-detection \
  --disable-client-hints \
  --disable-component-update \
  --disable-component-extensions-with-background-pages \
  --disable-domain-reliability \
  --disable-external-intent-requests \
  --disable-file-system \
  --disable-hang-monitor \
  --disable-speech-api \
  --disable-sync \
  --disable-translate \
  --disable-preconnect \
  --disable-notifications \
  --disable-webrtc-hw-decoding \
  --disable-webrtc-hw-encoding \
  --disable-blink-features=AutomationControlled \
  --deny-permission-prompts \
  --no-pings \
  --no-first-run \
  --no-default-browser-check \
  --block-new-web-contents \
  --site-per-process \
  --dns-over-https-mode=secure \
  --dns-over-https-templates="https://dns.quad9.net/dns-query" \
  --enforce-webrtc-ip-permission-check \
  --webrtc-ip-handling-policy=disable_non_proxied_udp \
  --enable-features=BlockInsecurePrivateNetworkRequests,EncryptedClientHello \
  --disk-cache-size=52428800 \
  "$@"