Post #4023268

2026-07-23 00:43 UTC

I've started unloading some notes from conversations I've had, and some stuff that was previously in my head. If you are looking for a place to start, how about recommending the "features" that would need to be removed from any good base: https://codeberg.org/basebrowserproject/organization/issues/3

Replies (5)

@sarahjamielewis@mastodon.social 2026-07-23 02:53

This evening I spent some time going through the latest firefox HEAD, with the idea being to catalog how many files/lines of code could be removed solely on the basis that they only exist to power the built in llm / chat / local ai stuff. I am currently at 136000 lines of code, a number so absurd that I have forced myself to triple check it - and I'm pretty sure I'm barely half way through this patch. The security auditor in me weeps.

Open ##4025863
@woody@pleroma.pch.net 2026-07-23 01:30

Nice! May I suggest: browsers should not ”helpfully” accept fraudulent CA certs when a DANE cert doesn’t validate.

Open ##4146013
@chrisvest@mastodon.social 2026-07-23 02:32

@sarahjamielewis@mastodon.social JavaScript access to the clip-bord and control of cut-copy-paste could be on the chopping block, as long as this doesn’t break password manager integrations

Open ##4146016
@chris__martin@functional.cafe 2026-07-23 04:17

@sarahjamielewis@mastodon.social Fonts, for the love of god. Remove web authors' ability to control what fonts the users render

Open ##4146017
@cpu@mastodon.tetaneutral.net 2026-07-23 07:46

@sarahjamielewis@mastodon.social Forced browser updates is not a problem ask to remove it may be a high security issue

Open ##4146025