Closed Bug 1171397 Opened 10 years ago Closed 9 years ago

In release builds only allow the NPAPI sandbox level pref to be increased from the default.

Categories

(Core :: Security: Process Sandboxing, defect)

Product:
Core
Component:
Security: Process Sandboxing
Platform:
All
Windows
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: bobowen, Assigned: bobowen)

References

Details

In a release build we don't want to allow the sandbox strength to be reduced using the level pref. So, check any user set value against the default. You will still be able to turn off the sandbox with the env var MOZ_DISABLE_NPAPI_SANDBOX=1 for testing in release builds.
This was done as part of bug 1185532. It was decided to do it for all builds and allow the pref to be used to test weaker settings if env var MOZ_ALLOW_WEAKER_SANDBOX=1 is set.
Assignee: nobody → bobowen.code
Status: NEW → RESOLVED
Closed: 9 years ago
Depends on: 1185532
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.