Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(75)

Side by Side Diff: content/public/browser/content_browser_client.cc

Issue 2411483002: Enable win32k lockdown for ppapi processes. (Closed)
Patch Set: readd entry Created 4 years, 2 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #include "content/public/browser/content_browser_client.h" 5 #include "content/public/browser/content_browser_client.h"
6 6
7 #include "base/files/file_path.h" 7 #include "base/files/file_path.h"
8 #include "base/guid.h" 8 #include "base/guid.h"
9 #include "build/build_config.h" 9 #include "build/build_config.h"
10 #include "content/public/browser/client_certificate_delegate.h" 10 #include "content/public/browser/client_certificate_delegate.h"
(...skipping 399 matching lines...) Expand 10 before | Expand all | Expand 10 after
410 410
411 base::string16 ContentBrowserClient::GetAppContainerSidForSandboxType( 411 base::string16 ContentBrowserClient::GetAppContainerSidForSandboxType(
412 int sandbox_type) const { 412 int sandbox_type) const {
413 // Embedders should override this method and return different SIDs for each 413 // Embedders should override this method and return different SIDs for each
414 // sandbox type. Note: All content level tests will run child processes in the 414 // sandbox type. Note: All content level tests will run child processes in the
415 // same AppContainer. 415 // same AppContainer.
416 return base::string16( 416 return base::string16(
417 L"S-1-15-2-3251537155-1984446955-2931258699-841473695-1938553385-" 417 L"S-1-15-2-3251537155-1984446955-2931258699-841473695-1938553385-"
418 L"924012148-129201922"); 418 L"924012148-129201922");
419 } 419 }
420
421 bool ContentBrowserClient::IsWin32kLockdownEnabledForMimeType(
422 const std::string& mime_type) const {
423 // TODO(wfh): Enable this by default once Win32k lockdown for PPAPI processes
424 // is enabled by default in Chrome. See crbug.com/523278.
425 return false;
426 }
427 #endif // defined(OS_WIN) 420 #endif // defined(OS_WIN)
428 421
429 std::unique_ptr<base::Value> ContentBrowserClient::GetServiceManifestOverlay( 422 std::unique_ptr<base::Value> ContentBrowserClient::GetServiceManifestOverlay(
430 const std::string& name) { 423 const std::string& name) {
431 return nullptr; 424 return nullptr;
432 } 425 }
433 426
434 } // namespace content 427 } // namespace content
OLDNEW
« no previous file with comments | « content/public/browser/content_browser_client.h ('k') | content/public/common/content_switches.h » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698