corysanin/tubestation
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bug 1284897 - Hook GetSaveFileNameW/GetOpenFileNameW to record and grant a sandboxed process permission to access user-chosen files. r=jimm

Browse Source
This commit is contained in:
David Parks
2017-02-08 11:38:40 -08:00
parent 503e8c213f
commit f7818b4465
8 changed files with 600 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
dom/plugins/ipc/PluginProcessParent.cpp
View File

@@ -97,13 +97,6 @@ AddSandboxAllowedFiles(int32_t aSandboxLevel,
return;
}
// Higher than level 2 currently removes the users own rights.
if (aSandboxLevel > 2) {
AddSandboxAllowedFile(aAllowedFilesRead, dirSvc, NS_WIN_HOME_DIR);
AddSandboxAllowedFile(aAllowedFilesRead, dirSvc, NS_WIN_HOME_DIR,
NS_LITERAL_STRING("\\*"));
}
// Level 2 and above is now using low integrity, so we need to give write
// access to the Flash directories.
// This should be made Flash specific (Bug 1171396).