Security/Sandbox: Difference between revisions

Jump to navigation Jump to search
Remove some Flash references
(→‎Windows: updated policy settings added RDD)
(Remove some Flash references)
Line 81: Line 81:
|style='text-align:center;' colspan="2"|disabled
|style='text-align:center;' colspan="2"|disabled
|style='text-align:center;' colspan="2"|disabled
|style='text-align:center;' colspan="2"|disabled
|-
| [https://searchfox.org/mozilla-central/source/security/sandbox/mac/SandboxPolicyFlash.h OSX (Flash NPAPI)]
|style='text-align:center;' colspan="2"|Level 1
|style='text-align:center;' colspan="2"|Level 1
|style='text-align:center;' colspan="2"|Level 1
|-
|-
| [https://dxr.mozilla.org/mozilla-central/search?q=class+ContentSandboxPolicy&redirect=true&case=true Linux (content)]
| [https://dxr.mozilla.org/mozilla-central/search?q=class+ContentSandboxPolicy&redirect=true&case=true Linux (content)]
Line 282: Line 277:


The socket process policy is defined in [https://searchfox.org/mozilla-central/source/security/sandbox/mac/SandboxPolicySocket.h SandboxPolicySocket.h]. At this time (May 2020), the socket process sandbox is only used on the Nightly channel and only for WebRTC networking.
The socket process policy is defined in [https://searchfox.org/mozilla-central/source/security/sandbox/mac/SandboxPolicySocket.h SandboxPolicySocket.h]. At this time (May 2020), the socket process sandbox is only used on the Nightly channel and only for WebRTC networking.
=== NPAPI Flash Process ===
Enabled in Firefox starting with build 62. The Mac Flash sandbox is enabled at level 1. Some features are affected by the Sandbox and those are documented in [https://support.mozilla.org/en-US/kb/changes-affecting-adobe-flash-firefox-mac "Changes affecting Adobe Flash on Firefox for Mac" on support.mozilla.org]. The Flash policy is defined in [https://searchfox.org/mozilla-central/source/security/sandbox/mac/SandboxPolicyFlash.h SandboxPolicyFlash.h].


== Linux ==
== Linux ==
Line 353: Line 344:
|-
|-
| Windows NPAPI Plugin || numerical || dom.ipc.plugins.sandbox-level.default<br>dom.ipc.plugins.sandbox-level.<plugintype>
| Windows NPAPI Plugin || numerical || dom.ipc.plugins.sandbox-level.default<br>dom.ipc.plugins.sandbox-level.<plugintype>
|-
| OS X NPAPI Plugin || numerical || dom.ipc.plugins.sandbox-level.default<br>dom.ipc.plugins.sandbox-level.flash
|-
|-
| Compositor || numerical || security.sandbox.gpu.level
| Compositor || numerical || security.sandbox.gpu.level
Line 560: Line 549:
* David Parks (handyman)
* David Parks (handyman)
* Stephen Pohl (spohl)
* Stephen Pohl (spohl)
* Toshihito Kikuchi (toshi)
* Gian-Carlo Pascutto (gcp)
* Gian-Carlo Pascutto (gcp)
|}
|}
202

edits

Navigation menu