Merezhyvo browser

naz.R

@naz.R said in Merezhyvo browser:

However, if several sites all include the same third-party scripts or trackers, those third parties can use their own cookies to recognize you across sites.

Trackers blocking task, including third-party cookies blocking, is still iт my ToDo list, so for now it is like that.

Thanks for the explanation. It is therefore up to everyone to decide whether they want currently to open several tabs at the same time, especially in the case of personal accounts.

I think I have to add here following:

Merezhyvo has one extra twist:
For performance on phones, the browser keeps only one active tab at a time.
When you switch to another tab, the previous one is deactivated and stops running code.

So in practice:
Sites still share cookies in the usual “per domain” way,

But there is never a moment when two different tabs are actively running JavaScript in parallel, only the currently selected tab is alive and executing.

domubpkm

@naz.R said in Merezhyvo browser:

So in practice:
Sites still share cookies in the usual “per domain” way,

But there is never a moment when two different tabs are actively running JavaScript in parallel, only the currently selected tab is alive and executing

I understand (I think) what you're saying, but does this change anything about the action / effect of third-party cookies?
Does this mean that even if they are there, they are asleep and have no negative spying action?

naz.R

@domubpkm said in Merezhyvo browser:

@naz.R said in Merezhyvo browser:

So in practice:
Sites still share cookies in the usual “per domain” way,

But there is never a moment when two different tabs are actively running JavaScript in parallel, only the currently selected tab is alive and executing

I understand (I think) what you're saying, but does this change anything about the action / effect of third-party cookies?
Does this mean that even if they are there, they are asleep and have no negative spying action?

no, it doesn't
the third-party cookie blocker is going to be in the next release after the next one, I believe.

domubpkm

@naz.r Not sure what I'm saying so sorry if I say something stupid:
Does certain data pass through a clipboard internal to the app (therefore different from the UT clipboard). If this is indeed the case, would it be possible to have a mechanism that allows its contents to be erased (security)?

naz.R

@domubpkm said in Merezhyvo browser:

@naz.r Not sure what I'm saying so sorry if I say something stupid:
Does certain data pass through a clipboard internal to the app (therefore different from the UT clipboard). If this is indeed the case, would it be possible to have a mechanism that allows its contents to be erased (security)?

You’re not saying anything stupid at all - Ubuntu Touch really does have a slightly weird situation with clipboards.

Merezhyvo itself doesn’t implement a separate “in-app” clipboard or any clipboard history. When you copy text in the browser, it goes to the clipboard that is exposed to confined apps on Ubuntu Touch.

However, because of how Ubuntu Touch sandboxes native apps, Libertine/X11 apps, Waydroid, etc., there isn’t a single global clipboard that everything shares. That’s why text copied in Merezhyvo often can’t be pasted into a native app (and vice versa) - they’re effectively using different system clipboards, not something I created inside the browser.

One related security detail: the built-in password autofill never uses the clipboard at all. Saved passwords are sent directly from the browser’s password storage into the page’s form fields over an internal IPC channel, and only live in memory long enough to fill the form. They are not put onto the Ubuntu Touch clipboard and not kept in any separate “hidden” clipboard inside the app.

domubpkm

@naz.R said in Merezhyvo browser:

One related security detail: the built-in password autofill never uses the clipboard at all.

Glad to hear that!

domubpkm

@naz.r Other points (nothing blocking):

make the zoom of a page we choose persistent?
zoom on the development tools. Tiny currently.
make the virtual keyboard cursor, removable on the right and left horizontal ?
allow the smartphone settings theme to apply? doesn't seem to be the case, for example on a github page. I can't get out of the dark theme.

naz.R

@domubpkm said in Merezhyvo browser:

@naz.r Other points (nothing blocking):

make the zoom of a page we choose persistent?

zoom on the development tools. Tiny currently.

make the virtual keyboard cursor, removable on the right and left horizontal ?

allow the smartphone settings theme to apply? doesn't seem to be the case, for example on a github page. I can't get out of the dark theme.

Thank you for your active position. It really inspires me to continue working on this project and develop it further.
I added all these wishes to my ToDo list (some were already there).
Right now I'm focusing on the basic functionality, with an emphasis on privacy and security. But I'm also trying to add a little something related to usability.
But sooner or later, the time will come for the implementation of each idea.
And, yes, there is only one dark theme for now. My goal is to make a fully functional and secure browser first. And then I will focus more on other stuff.

domubpkm

@naz.R said in Merezhyvo browser:

My goal is to make a fully functional and secure browser first.

I agree with you 100% ! Safety first.
But as this browser “inspires me”, I test and pass on the info.

naz.R

@domubpkm really glade you like it.
By the way have you had a chance to try it in desktop mode, with an external browser?
Merezhyvo is fully convergent one.

domubpkm

@naz.R said in Merezhyvo browser:

By the way have you had a chance to try it in desktop mode, with an external browser?
Merezhyvo is fully convergent one

Not me at the moment. I don't have the cable for it.

naz.R

@domubpkm said in Merezhyvo browser:

@naz.R said in Merezhyvo browser:

By the way have you had a chance to try it in desktop mode, with an external browser?
Merezhyvo is fully convergent one

Not me at the moment. I don't have the cable for it.

got it.
I use a cheap miracast dongle for connection to a regular PC monitor. It works well enough, not the best, but really well enough.

naz.R

version 0.4.3 has been released

Change log:

0.4.3 - 2025-12-06
Added

Pull-to-refresh gesture to reload pages
In-app certificate validation with a security indicator, warning screen, and certificate info popover
Configurable HTTPS mode (Strict / Preferred)
WebRTC privacy modes (Always allowed / Always blocked / Blocked when Tor is enabled)
UI improvements

Changed

Updated Electron/Chromium engine (Chromium 142.0.7444.177)

domubpkm

@naz.R said in Merezhyvo browser:

WebRTC privacy modes

Thanks for all and particularly for this !

domubpkm

Hi @naz.r
Small virtual keyboard malfunction maybe :

Problem displaying accented characters on the Azerti keyboard 'a'. On the other hand, the choices of the different accented characters do not disappear from the display if a choice is not made.

naz.R

@domubpkm said in Merezhyvo browser:

Problem displaying accented characters on the Azerti keyboard 'a'. On the other hand, the choices of the different accented characters do not disappear from the display if a choice is not made.

will fix it, thanks for letting me know

naz.R

Merezhyvo version 0.4.4 has been released.

Here are the main changes:

Third-party cookies control

New global setting to block or allow third-party cookies.

You can now add per-site exceptions when a site breaks without them (for example: some logins, widgets, or embedded content).

These exceptions are visible both on the internal “Manage security exceptions” page and in the shield popover for the current site.

New “Site data” page

New internal page where you can inspect and clear cookies and stored data per site.

There is also a “Clear all data” button if you want a full reset.

Some entries in this list may be from domains you did not visit directly (for example CDNs, analytics, embedded content); that’s normal, and now it’s easier to see and clean them.

“Privacy & Security – How this works”

New internal help page that explains, in simple terms, how HTTPS, certificates, cookies, WebRTC and the internal tools behave in Merezhyvo.

The goal is that you don’t need to be a security expert to understand what these options do.

Better touch support

Fixed drag/rotation gestures on some interactive sites that use custom canvas / SVG / D3 handling – for example earth.nullschool.net now works correctly on Ubuntu Touch.

UI & translations

The shield popover now also reflects non-default privacy/security settings (like cookie exceptions).

Added Dutch, Spanish and Italian translations.

Improved layout, added Close buttons on internal security pages, and fixed some issues with accent letters on the on-screen keyboard.

As always, feedback is very welcome – especially if you notice any regressions with the new privacy tools or interactive sites.

Ida_

I really like this browser! Is there any chance you could also add a Norwegian keyboard? I really like how you've implemeted a different keyboard, it is refreshing to try something different. Thank you for sharing your work with us.

naz.R

@Ida_ said in Merezhyvo browser:

I really like this browser! Is there any chance you could also add a Norwegian keyboard? I really like how you've implemeted a different keyboard, it is refreshing to try something different. Thank you for sharing your work with us.

thank you for your feedback and your request @ida_
sure, will add it in the next release, noted.

DJac

Hi, I wan't to tried it, but i can't install on my device :
Sony Xperia X : UT 20.04 OTA-11
Is the device not in charge or a other problem ? How can i do ?