mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-10-21 09:15:35 +00:00
946187d684
On 10.9 and 10.10, grant global read access to the Flash sandbox. Change Flash sandbox levels by adding a new level 1 that includes global read access which will be the default on 10.9/10.10. Level 2 is the new default for 10.11 and above with file read access enabled by file dialog activity. MozReview-Commit-ID: LvXhd6Vf7mo --HG-- extra : rebase_source : 946f89937e5bb4506fd6bc8b2c050c86a8b29cc8
101 lines
2.4 KiB
C++
101 lines
2.4 KiB
C++
/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
|
|
/* vim: set ts=8 sts=2 et sw=2 tw=80: */
|
|
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this file,
|
|
* You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
#include "mozISandboxSettings.h"
|
|
|
|
#include "mozilla/ModuleUtils.h"
|
|
#include "mozilla/Preferences.h"
|
|
|
|
#include "prenv.h"
|
|
|
|
namespace mozilla {
|
|
|
|
int GetEffectiveContentSandboxLevel() {
|
|
if (PR_GetEnv("MOZ_DISABLE_CONTENT_SANDBOX")) {
|
|
return 0;
|
|
}
|
|
int level = Preferences::GetInt("security.sandbox.content.level");
|
|
// On Windows and macOS, enforce a minimum content sandbox level of 1 (except on
|
|
// Nightly, where it can be set to 0).
|
|
#if !defined(NIGHTLY_BUILD) && (defined(XP_WIN) || defined(XP_MACOSX))
|
|
if (level < 1) {
|
|
level = 1;
|
|
}
|
|
#endif
|
|
#ifdef XP_LINUX
|
|
// Level 4 and up will break direct access to audio.
|
|
if (level > 3 && !Preferences::GetBool("media.cubeb.sandbox")) {
|
|
level = 3;
|
|
}
|
|
#endif
|
|
|
|
return level;
|
|
}
|
|
|
|
bool IsContentSandboxEnabled() {
|
|
return GetEffectiveContentSandboxLevel() > 0;
|
|
}
|
|
|
|
#if defined(XP_MACOSX)
|
|
int ClampFlashSandboxLevel(const int aLevel) {
|
|
const int minLevel = 0;
|
|
const int maxLevel = 3;
|
|
|
|
if (aLevel < minLevel) {
|
|
return minLevel;
|
|
}
|
|
|
|
if (aLevel > maxLevel) {
|
|
return maxLevel;
|
|
}
|
|
return aLevel;
|
|
}
|
|
#endif
|
|
|
|
class SandboxSettings final : public mozISandboxSettings
|
|
{
|
|
public:
|
|
NS_DECL_ISUPPORTS
|
|
NS_DECL_MOZISANDBOXSETTINGS
|
|
|
|
SandboxSettings() { }
|
|
|
|
private:
|
|
~SandboxSettings() { }
|
|
};
|
|
|
|
NS_IMPL_ISUPPORTS(SandboxSettings, mozISandboxSettings)
|
|
|
|
NS_IMETHODIMP SandboxSettings::GetEffectiveContentSandboxLevel(int32_t *aRetVal)
|
|
{
|
|
*aRetVal = mozilla::GetEffectiveContentSandboxLevel();
|
|
return NS_OK;
|
|
}
|
|
|
|
NS_GENERIC_FACTORY_CONSTRUCTOR(SandboxSettings)
|
|
|
|
NS_DEFINE_NAMED_CID(MOZ_SANDBOX_SETTINGS_CID);
|
|
|
|
static const mozilla::Module::CIDEntry kSandboxSettingsCIDs[] = {
|
|
{ &kMOZ_SANDBOX_SETTINGS_CID, false, nullptr, SandboxSettingsConstructor },
|
|
{ nullptr }
|
|
};
|
|
|
|
static const mozilla::Module::ContractIDEntry kSandboxSettingsContracts[] = {
|
|
{ MOZ_SANDBOX_SETTINGS_CONTRACTID, &kMOZ_SANDBOX_SETTINGS_CID },
|
|
{ nullptr }
|
|
};
|
|
|
|
static const mozilla::Module kSandboxSettingsModule = {
|
|
mozilla::Module::kVersion,
|
|
kSandboxSettingsCIDs,
|
|
kSandboxSettingsContracts
|
|
};
|
|
|
|
NSMODULE_DEFN(SandboxSettingsModule) = &kSandboxSettingsModule;
|
|
|
|
} // namespace mozilla
|