| Index: content/app/sandbox_helper_win.cc
|
| diff --git a/content/app/sandbox_helper_win.cc b/content/app/sandbox_helper_win.cc
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..6e06e5c420fd1a7e8155294d9b7b2381998f3ecf
|
| --- /dev/null
|
| +++ b/content/app/sandbox_helper_win.cc
|
| @@ -0,0 +1,25 @@
|
| +// Copyright (c) 2011 The Chromium Authors. All rights reserved.
|
| +// Use of this source code is governed by a BSD-style license that can be
|
| +// found in the LICENSE file.
|
| +
|
| +#include "content/public/app/sandbox_helper_win.h"
|
| +
|
| +#include "sandbox/win/src/process_mitigations.h"
|
| +#include "sandbox/win/src/sandbox_factory.h"
|
| +
|
| +namespace content {
|
| +
|
| +void InitializeSandboxInfo(sandbox::SandboxInterfaceInfo* info) {
|
| + info->broker_services = sandbox::SandboxFactory::GetBrokerServices();
|
| + if (!info->broker_services) {
|
| + info->target_services = sandbox::SandboxFactory::GetTargetServices();
|
| + } else {
|
| + // Ensure the proper mitigations are enforced for the browser process.
|
| + sandbox::ApplyProcessMitigationsToCurrentProcess(
|
| + sandbox::MITIGATION_DEP |
|
| + sandbox::MITIGATION_DEP_NO_ATL_THUNK |
|
| + sandbox::MITIGATION_HARDEN_TOKEN_IL_POLICY);
|
| + }
|
| +}
|
| +
|
| +} // namespace content
|
|
|