Merge tag 89.0.4389.117 from bromite

### Bromite version

Version: `83.0...`

Version: `89.0...`

Arch: `arm` or `arm64` or `x86`

Android version: (example: `9.0`)

Device model: (example: `SM-G960UZKABST`)

<!-- Report all the blue-highlighted flags here, those are the flags with non-default configuration -->

### Is this bug about the SystemWebView?

Yes/No

<!-- No support for SystemWebView installations is provided. -->

Yes/No

### Is the bug reproducible with latest version?

<!-- Do not report bugs which are not reproducible with latest version. -->

Yes/No

### Can the bug be reproduced with corresponding Chromium version?

<!--

If the bug is reproducible then it might be a configuration issue or an upstream bug. Upstream bugs can be reported on the [Chromium issue tracker](https://bugs.chromium.org/p/chromium/issues/list) and do not forget to read [Chromium project bug reporting guidelines](https://www.chromium.org/for-testers/bug-reporting-guidelines) first.

-->

Yes/No

### Allow ads for the site; is the bug caused by the adblocker?

Yes/No

### Is the bug a crash?

<!--

If yes then individuate and post the logcat dump (remove privacy sensitive information, if any), otherwise remove this section.

If yes then individuate and post the 'adb logcat | grep chromium' dump, otherwise remove this section.

-->

Yes, this is the crash dump:

```

<paste here logcat dump>

```

### Describe the bug

# 89.0.4389.117

* disable AImageReader by default on Android 9 and below (fixes https://github.com/bromite/bromite/issues/1005)

* log checksum of AdBlock filters

# 89.0.4389.100

* enable AImageReader by default (fixes https://github.com/bromite/bromite/issues/1005)

* fix missing flag for AImageReader

* disable scroll-to-text-fragment

* reduced referer granularity

* block gateway attacks via websockets

* use 64-bit ABI for webview processes

* make all favicon requests on-demand ([supercookie](https://supercookie.me/) mitigation)

* enable all network isolation features (`PartitionConnectionsByNetworkIsolationKey`, `PartitionHttpServerPropertiesByNetworkIsolationKey`, `SplitHostCacheByNetworkIsolationKey`, `AppendFrameOriginToNetworkIsolationKey`, `SplitCacheByNetworkIsolationKey`, `UseRegistrableDomainInNetworkIsolationKey`, `PartitionSSLSessionsByNetworkIsolationKey`, `PartitionExpectCTStateByNetworkIsolationKey`, `PartitionDomainReliabilityByNetworkIsolationKey`)

* ignore enterprise policies that disallow secure DNS

* ask permission to play protected media

* disable the DIAL repeating discovery

## Features not related to privacy

* import/export bookmarks

* view source of pages

* timezone customization

* sticky desktop mode setting

* disable video autoplay by default

* disable video autoplay by default, reintroduce site settings

* mobile/desktop user agent customization

* accessibility preference to force tablet UI

* use Alt+D to focus address bar

You can inspect all functionality/privacy changes by reading the [patches](https://github.com/bromite/bromite/tree/master/build/patches) and/or the [CHANGELOG](./CHANGELOG.md).

* `#pull-to-refresh`

* `#enable-search-ready-omnibox`

* `#darken-websites-checkbox-in-themes-setting`

* `#simplified-ntp`

* `#enable-text-fragment-anchor`

* `#simplified-ntp`, enabled by default

* `#enable-text-fragment-anchor`, disabled by default

* `#num-raster-threads`

* `#enable-image-reader`, enabled by default

New flags:

* `#fingerprinting-canvas-image-data-noise`, `#fingerprinting-client-rects-noise` and `#fingerprinting-canvas-measuretext-noise`

* `#enable-incognito-snapshots-in-android-recents`

* `#fingerprinting-canvas-image-data-noise`, `#fingerprinting-client-rects-noise` and `#fingerprinting-canvas-measuretext-noise`, enabled by default

* `#enable-incognito-snapshots-in-android-recents`, disabled by default

* `#max-connections-per-host`

* `#resume-background-video`

* `#ipv6-probing`

* `#disable-webgl`

* `#enable-device-motion` and `#enable-device-orientation`

* `#show-legacy-tls-warnings`

* `#save-data-header`, disabled by default

* `#export-bookmarks-use-saf`, enabled by default

# Privacy limitations

89.0.4389.100

89.0.4389.117

 base/android/android_image_reader_compat.cc |  8 +++++++-

 base/android/android_image_reader_compat.h  |  4 ++++

 chrome/browser/flag-metadata.json           |  2 +-

 gpu/config/gpu_driver_bug_list.json         | 16 ++++++++++++++++

 gpu/config/gpu_finch_features.cc            |  5 +++++

 gpu/config/gpu_finch_features.h             |  1 +

 gpu/config/gpu_util.cc                      |  8 ++++++++

 gpu/ipc/service/stream_texture_android.cc   | 11 ++++++++++-

 media/base/media_switches.cc                |  4 ++++

 media/base/media_switches.h                 |  1 +

 11 files changed, 47 insertions(+), 3 deletions(-)

 12 files changed, 63 insertions(+), 3 deletions(-)

diff --git a/base/android/android_image_reader_compat.cc b/base/android/android_image_reader_compat.cc

--- a/base/android/android_image_reader_compat.cc

   },

   {

     "name": "enable-immersive-fullscreen-toolbar",

diff --git a/gpu/config/gpu_driver_bug_list.json b/gpu/config/gpu_driver_bug_list.json

--- a/gpu/config/gpu_driver_bug_list.json

+++ b/gpu/config/gpu_driver_bug_list.json

@@ -3254,6 +3254,22 @@

         "dont_delete_source_texture_for_egl_image"

       ]

     },

+    {

+      "id":335,

+      "cr_bugs": [1051705],

+      "description": "Disable AImageReader on ARM GPUs",

+      "os": {

+        "type": "android",

+        "version": {

+          "op": "<",

+          "value": "10"

+        }

+      },

+      "gl_vendor": "ARM.*",

+      "features": [

+        "disable_aimagereader"

+      ]

+    },

     {

       "id": 336,

       "cr_bugs": [625785],

diff --git a/gpu/config/gpu_finch_features.cc b/gpu/config/gpu_finch_features.cc

--- a/gpu/config/gpu_finch_features.cc

+++ b/gpu/config/gpu_finch_features.cc