Index: content/common/sandbox_win.cc |
diff --git a/content/common/sandbox_win.cc b/content/common/sandbox_win.cc |
index 18b30e2963cd5afc568bc839868238037fd4146b..49e34e864c3ba92aa6f9d245eb4f634b50c76afe 100644 |
--- a/content/common/sandbox_win.cc |
+++ b/content/common/sandbox_win.cc |
@@ -359,6 +359,7 @@ bool AddPolicyForSandboxedProcess(sandbox::TargetPolicy* policy) { |
policy->SetTokenLevel(initial_token, sandbox::USER_LOCKDOWN); |
// Prevents the renderers from manipulating low-integrity processes. |
policy->SetDelayedIntegrityLevel(sandbox::INTEGRITY_LEVEL_UNTRUSTED); |
+ policy->SetIntegrityLevel(sandbox::INTEGRITY_LEVEL_LOW); |
if (sandbox::SBOX_ALL_OK != policy->SetAlternateDesktop(true)) { |
DLOG(WARNING) << "Failed to apply desktop security to the renderer"; |