Index: content/browser/ppapi_plugin_process_host.cc |
diff --git a/content/browser/ppapi_plugin_process_host.cc b/content/browser/ppapi_plugin_process_host.cc |
index 74c6e0f75e20290992d96cb1a221c4c4cae59e94..e17b69478b0ab12d8f1caf447f19fa904222d306 100644 |
--- a/content/browser/ppapi_plugin_process_host.cc |
+++ b/content/browser/ppapi_plugin_process_host.cc |
@@ -81,18 +81,23 @@ class PpapiPluginSandboxedProcessLauncherDelegate |
if (result != sandbox::SBOX_ALL_OK) |
return false; |
+ content::ContentBrowserClient* browser_client = |
+ GetContentClient()->browser(); |
+ |
#if !defined(NACL_WIN64) |
- for (const auto& mime_type : info_.mime_types) { |
- if (IsWin32kLockdownEnabledForMimeType(mime_type.mime_type)) { |
- if (!AddWin32kLockdownPolicy(policy)) |
- return false; |
- break; |
+ if (IsWin32kRendererLockdownEnabled()) { |
+ for (const auto& mime_type : info_.mime_types) { |
+ if (browser_client->IsWin32kLockdownEnabledForMimeType( |
+ mime_type.mime_type)) { |
+ if (!AddWin32kLockdownPolicy(policy)) |
+ return false; |
+ break; |
+ } |
} |
} |
#endif |
const base::string16& sid = |
- GetContentClient()->browser()->GetAppContainerSidForSandboxType( |
- GetSandboxType()); |
+ browser_client->GetAppContainerSidForSandboxType(GetSandboxType()); |
if (!sid.empty()) |
AddAppContainerPolicy(policy, sid.c_str()); |