mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-10-27 12:15:33 +00:00
897ae925f7
Backed out changeset 00edc1ac58f9 (bug 1365257) --HG-- extra : rebase_source : d33f3bba71d1899e0f4a5051369c240e00ea42fe
78 lines
2.0 KiB
C++
78 lines
2.0 KiB
C++
/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
|
|
/* vim: set ts=8 sts=2 et sw=2 tw=80: */
|
|
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this file,
|
|
* You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
#include "mozISandboxSettings.h"
|
|
|
|
#include "mozilla/ModuleUtils.h"
|
|
#include "mozilla/Preferences.h"
|
|
|
|
#include "prenv.h"
|
|
|
|
namespace mozilla {
|
|
|
|
int GetEffectiveContentSandboxLevel() {
|
|
if (PR_GetEnv("MOZ_DISABLE_CONTENT_SANDBOX")) {
|
|
return 0;
|
|
}
|
|
int level = Preferences::GetInt("security.sandbox.content.level");
|
|
// On Windows and macOS, enforce a minimum content sandbox level of 1 (except on
|
|
// Nightly, where it can be set to 0).
|
|
#if !defined(NIGHTLY_BUILD) && (defined(XP_WIN) || defined(XP_MACOSX))
|
|
if (level < 1) {
|
|
level = 1;
|
|
}
|
|
#endif
|
|
return level;
|
|
}
|
|
|
|
bool IsContentSandboxEnabled() {
|
|
return GetEffectiveContentSandboxLevel() > 0;
|
|
}
|
|
|
|
class SandboxSettings final : public mozISandboxSettings
|
|
{
|
|
public:
|
|
NS_DECL_ISUPPORTS
|
|
NS_DECL_MOZISANDBOXSETTINGS
|
|
|
|
SandboxSettings() { }
|
|
|
|
private:
|
|
~SandboxSettings() { }
|
|
};
|
|
|
|
NS_IMPL_ISUPPORTS(SandboxSettings, mozISandboxSettings)
|
|
|
|
NS_IMETHODIMP SandboxSettings::GetEffectiveContentSandboxLevel(int32_t *aRetVal)
|
|
{
|
|
*aRetVal = mozilla::GetEffectiveContentSandboxLevel();
|
|
return NS_OK;
|
|
}
|
|
|
|
NS_GENERIC_FACTORY_CONSTRUCTOR(SandboxSettings)
|
|
|
|
NS_DEFINE_NAMED_CID(MOZ_SANDBOX_SETTINGS_CID);
|
|
|
|
static const mozilla::Module::CIDEntry kSandboxSettingsCIDs[] = {
|
|
{ &kMOZ_SANDBOX_SETTINGS_CID, false, nullptr, SandboxSettingsConstructor },
|
|
{ nullptr }
|
|
};
|
|
|
|
static const mozilla::Module::ContractIDEntry kSandboxSettingsContracts[] = {
|
|
{ MOZ_SANDBOX_SETTINGS_CONTRACTID, &kMOZ_SANDBOX_SETTINGS_CID },
|
|
{ nullptr }
|
|
};
|
|
|
|
static const mozilla::Module kSandboxSettingsModule = {
|
|
mozilla::Module::kVersion,
|
|
kSandboxSettingsCIDs,
|
|
kSandboxSettingsContracts
|
|
};
|
|
|
|
NSMODULE_DEFN(SandboxSettingsModule) = &kSandboxSettingsModule;
|
|
|
|
} // namespace mozilla
|