From 7f188f1c4cb6ef10f0fc6184769880748eb6df54 Mon Sep 17 00:00:00 2001
From: oneflux <oneflux@riseup.net>
Date: Tue, 22 Apr 2025 11:55:02 -0700
Subject: [PATCH] additional (possibly redundant) security options

---
 assets/base.mozconfig | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/assets/base.mozconfig b/assets/base.mozconfig
index b0ff25a..f19b471 100644
--- a/assets/base.mozconfig
+++ b/assets/base.mozconfig
@@ -53,10 +53,16 @@ export MOZ_OPTIMIZE=1
 ac_add_options --enable-hardening
 ac_add_options --disable-jemalloc
 ac_add_options --enable-cfi
+ac_add_options --enable-cfi-clang
 ac_add_options --enable-safestack
 ac_add_options --enable-pie
 ac_add_options --enable-sandbox
+ac_add_options --enable-fission
 ac_add_options --enable-default-toolkit=cairo-gtk3-wayland
+ac_add_options --enable-randomize
+ac_add_options --enable-stack-protector
+ac_add_options --enable-fortify-source=2
+ac_add_options --with-clang-extra-optimization-flags="-fstack-protector-strong -fno-omit-frame-pointer -fvisibility=hidden -march=native"
 
 # BUILDING
 # mk_add_options AUTOCLOBBER=1