| Index: content/common/sandbox_win.cc
|
| diff --git a/content/common/sandbox_win.cc b/content/common/sandbox_win.cc
|
| index 4e441bc7a95ea5812d2bcfe7d7ed54102dedde50..9f5e668d488c4c16f3ae8b493748dc342936d167 100644
|
| --- a/content/common/sandbox_win.cc
|
| +++ b/content/common/sandbox_win.cc
|
| @@ -693,11 +693,13 @@ base::Process StartSandboxedProcess(
|
|
|
| sandbox::TargetPolicy* policy = g_broker_services->CreatePolicy();
|
|
|
| - sandbox::MitigationFlags mitigations = sandbox::MITIGATION_HEAP_TERMINATE |
|
| - sandbox::MITIGATION_BOTTOM_UP_ASLR |
|
| - sandbox::MITIGATION_DEP |
|
| - sandbox::MITIGATION_DEP_NO_ATL_THUNK |
|
| - sandbox::MITIGATION_SEHOP;
|
| + sandbox::MitigationFlags mitigations =
|
| + sandbox::MITIGATION_HEAP_TERMINATE |
|
| + sandbox::MITIGATION_BOTTOM_UP_ASLR |
|
| + sandbox::MITIGATION_DEP |
|
| + sandbox::MITIGATION_DEP_NO_ATL_THUNK |
|
| + sandbox::MITIGATION_SEHOP |
|
| + sandbox::MITIGATION_EXTENSION_DLL_DISABLE;
|
|
|
| if (policy->SetProcessMitigations(mitigations) != sandbox::SBOX_ALL_OK)
|
| return base::Process();
|
|
|