I recently started to fork webkit to make it a Webview with a reduced attack surface.
The most interesting part was the Quirks.cpp file [1] that contains literally randomized css classnames inside the web browser code because a major website was so shitty and spec violating in their implementations.
I mean, fixing a website in a browser source code...this shit got out of hand real quick.
The problem with all those drafts is that Google keeps doing their own thing, and others are forced to try to catch-up or implement the same bugs/quirks that chromium does. Everything is rushed so QUICly that even Microsoft gave up at some point. And at some point in the past google realized that they can own the web if they own the Browser. And that's what they effectively do now, because the competition isn't really a competition at all anymore.
It gets worse if you search
for "microsoft.com" [1] or "bbc.co.uk" in the codebase. They literally
grant cross domain storage access because Microsoft's login workflow is
broken in regards to CORS headers. |