bromite/bromite

Features

• Ad-Blocking Android Browsers - An Android browser that blocks advertisements and tracking scripts using built-in filter lists without manual configuration.
• Privacy-Focused Browsers - A Chromium-based browser that blocks ads and trackers by default and adds privacy enhancements without requiring extensions.
• Patch-Based Forks - Applies a curated set of patches to the Chromium source tree at build time to add privacy features.
• Browser Privacy Defaults - Bromite applies hardened privacy defaults such as disabling third-party cookies and blocking fingerprinting APIs.
• Process-Level Isolations - Runs each website in its own operating system process to prevent one site from accessing another's data.
• Origin-Based Isolation - Isolates every unique origin into its own process, preventing any cross-origin data access.
• DNS-over-HTTPS Clients - Sends DNS queries through encrypted HTTPS connections to a user-specified endpoint.
• Ad-Blocking Lists - Blocks advertisements and tracking scripts across all websites using built-in filter lists without manual configuration.
• Custom Filter List Applications - Applies user-provided, automatically updated filter lists to block advertisements during browsing.
• Tracking Parameter Removers - Removes known tracking query parameters from URLs before loading pages.
• Network-Level Filter List Engines - Blocks network requests by matching URLs against compiled filter lists using Chromium's network stack interception.
• Fingerprint Mitigation Tools - Disables or spoofs browser APIs to prevent device fingerprinting by freezing the User-Agent and adding noise.
• Browser Fingerprint Spoofing - Conceals device and browser identity by freezing the User-Agent string and adding noise to APIs.
• Browser API Noise Injectors - Adds noise to browser APIs and freezes the User-Agent string to prevent device fingerprinting.
• Cross-Site Leak Prevention - Bromite separates connection pools, caches, and SSL sessions per top-frame origin to prevent cross-site tracking.
• Browser Incognito Sessions - Opens browsing sessions that leave no local history, cookies, or site data after the session ends.
• HTTPS Enforcements - Forces all web traffic to use encrypted HTTPS connections, blocking unencrypted HTTP requests at the network level.
• Privacy and Ad Blocking - Blocks advertisements and tracking scripts across all websites while disabling telemetry and fingerprinting to protect user privacy.
• Browser Telemetry Disablers - Bromite disables telemetry, background data collection, and other privacy-compromising features built into the browser.
• Privacy Sandbox Controls - Bromite prevents the browser from participating in cohort-based ad targeting and related privacy experiments.
• Cleartext Traffic Controls - Forces all connections to use HTTPS and blocks any plain HTTP requests.
• Network Request Filters - Intercepts and selectively blocks network requests based on resource type or URL patterns using filter lists.
• User Script Injection Browsers - Bromite injects custom JavaScript into web pages with control over execution timing and URL matching rules for automating or modifying page behavior.
• DNS Query Caches - Bromite separates DNS-over-HTTPS query caches per top-frame origin to prevent cross-site correlation.
• Runtime Module Loading Blockers - Blocks the browser from downloading and executing additional code modules at runtime.
• User Script Importers - Bromite imports custom JavaScript files from the file picker or by opening a .user.js download, then activates them from the settings menu.
• Background Media Playback - Continues audio playback when switching tabs or locking the screen.
• Background Media Playback - Continues video playback when switching tabs or moving the browser to the background.
• Browser Prefetch Disablers - Bromite stops the browser from preloading or prefetching pages based on browsing patterns.
• Network Proxy Configurations - Configures network traffic routing through proxy auto-config files and defines bypass rules.
• Certificate Transparency - Requires that TLS certificates be publicly logged before they are accepted by the browser.
• External Link Incognito Forcers - Bromite opens links from other apps in an incognito tab to prevent tracking across browsing contexts.
• Persistent Incognito Sessions - Prevents any history, cookies, or site data from being saved after the browsing session ends.
• Tracking Prevention - Strips click-tracking parameters and redirects from search results to prevent advertisers from following user activity.
• Click-Tracking and AMP Blockers - Strips tracking parameters and redirects Accelerated Mobile Pages to their original URLs to prevent analytics leakage.
• Site Permission Overrides - Controls per-site access to WebGL, JavaScript JIT, WebRTC, autoplay, images, and timezone from the address bar.
• WebSocket Attack Blockers - Partially mitigates attacks that exploit WebSocket connections to access internal network resources.
• Referrer Leakage Prevention - Bromite limits the amount of URL data sent in the HTTP Referer header to prevent leakage of browsing history.
• Omnibox Data Protections - Limits address bar suggestions to reduce leakage of browsing history.
• Session Resumption Disablers - Bromite forces a full TLS handshake on every connection to prevent session ticket tracking.
• TLS Version Controls - Shows a warning when a site uses outdated TLS versions and blocks connections to insecure protocols.
• Address Bar Relocations - Bromite relocates the address bar and toolbar from the top to the bottom of the screen for one-handed use.
• Browser Interface Layout Adjustments - Bromite moves the navigation bar to the bottom, forces tablet UI, sets sticky desktop mode, and adjusts the new tab page layout.
• Script Injections - Injects custom JavaScript into web pages with configurable execution timing and URL matching rules.
• Content Script Injection Architectures - Injects JavaScript into web pages at configurable lifecycle points via Chromium's content script extension mechanism.
• URL-Matched Injections - Bromite applies user scripts only to pages whose URL matches defined patterns using @include, @exclude, @match, and @exclude_match headers.
• Offline Web Page Archivers - Bromite automatically saves web pages for offline reading when the device loses network connectivity.
• Script Injection Engines - Injects and executes custom scripts within browser contexts at specific lifecycle stages for page modification.
• Media & Communication - Chromium-based browser with built-in ad blocking.

Star history