Index: content/app/sandbox_helper_win.cc |
diff --git a/content/app/sandbox_helper_win.cc b/content/app/sandbox_helper_win.cc |
new file mode 100644 |
index 0000000000000000000000000000000000000000..6e06e5c420fd1a7e8155294d9b7b2381998f3ecf |
--- /dev/null |
+++ b/content/app/sandbox_helper_win.cc |
@@ -0,0 +1,25 @@ |
+// Copyright (c) 2011 The Chromium Authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+#include "content/public/app/sandbox_helper_win.h" |
+ |
+#include "sandbox/win/src/process_mitigations.h" |
+#include "sandbox/win/src/sandbox_factory.h" |
+ |
+namespace content { |
+ |
+void InitializeSandboxInfo(sandbox::SandboxInterfaceInfo* info) { |
+ info->broker_services = sandbox::SandboxFactory::GetBrokerServices(); |
+ if (!info->broker_services) { |
+ info->target_services = sandbox::SandboxFactory::GetTargetServices(); |
+ } else { |
+ // Ensure the proper mitigations are enforced for the browser process. |
+ sandbox::ApplyProcessMitigationsToCurrentProcess( |
+ sandbox::MITIGATION_DEP | |
+ sandbox::MITIGATION_DEP_NO_ATL_THUNK | |
+ sandbox::MITIGATION_HARDEN_TOKEN_IL_POLICY); |
+ } |
+} |
+ |
+} // namespace content |