зеркало из https://github.com/mozilla/gecko-dev.git
78 строки
2.0 KiB
C++
78 строки
2.0 KiB
C++
/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
|
|
/* vim: set ts=8 sts=2 et sw=2 tw=80: */
|
|
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this file,
|
|
* You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
#include "mozISandboxSettings.h"
|
|
|
|
#include "mozilla/ModuleUtils.h"
|
|
#include "mozilla/Preferences.h"
|
|
|
|
#include "prenv.h"
|
|
|
|
namespace mozilla {
|
|
|
|
int GetEffectiveContentSandboxLevel() {
|
|
if (PR_GetEnv("MOZ_DISABLE_CONTENT_SANDBOX")) {
|
|
return 0;
|
|
}
|
|
int level = Preferences::GetInt("security.sandbox.content.level");
|
|
// On Windows and macOS, enforce a minimum content sandbox level of 1 (except on
|
|
// Nightly, where it can be set to 0).
|
|
#if !defined(NIGHTLY_BUILD) && (defined(XP_WIN) || defined(XP_MACOSX))
|
|
if (level < 1) {
|
|
level = 1;
|
|
}
|
|
#endif
|
|
return level;
|
|
}
|
|
|
|
bool IsContentSandboxEnabled() {
|
|
return GetEffectiveContentSandboxLevel() > 0;
|
|
}
|
|
|
|
class SandboxSettings final : public mozISandboxSettings
|
|
{
|
|
public:
|
|
NS_DECL_ISUPPORTS
|
|
NS_DECL_MOZISANDBOXSETTINGS
|
|
|
|
SandboxSettings() { }
|
|
|
|
private:
|
|
~SandboxSettings() { }
|
|
};
|
|
|
|
NS_IMPL_ISUPPORTS(SandboxSettings, mozISandboxSettings)
|
|
|
|
NS_IMETHODIMP SandboxSettings::GetEffectiveContentSandboxLevel(int32_t *aRetVal)
|
|
{
|
|
*aRetVal = mozilla::GetEffectiveContentSandboxLevel();
|
|
return NS_OK;
|
|
}
|
|
|
|
NS_GENERIC_FACTORY_CONSTRUCTOR(SandboxSettings)
|
|
|
|
NS_DEFINE_NAMED_CID(MOZ_SANDBOX_SETTINGS_CID);
|
|
|
|
static const mozilla::Module::CIDEntry kSandboxSettingsCIDs[] = {
|
|
{ &kMOZ_SANDBOX_SETTINGS_CID, false, nullptr, SandboxSettingsConstructor },
|
|
{ nullptr }
|
|
};
|
|
|
|
static const mozilla::Module::ContractIDEntry kSandboxSettingsContracts[] = {
|
|
{ MOZ_SANDBOX_SETTINGS_CONTRACTID, &kMOZ_SANDBOX_SETTINGS_CID },
|
|
{ nullptr }
|
|
};
|
|
|
|
static const mozilla::Module kSandboxSettingsModule = {
|
|
mozilla::Module::kVersion,
|
|
kSandboxSettingsCIDs,
|
|
kSandboxSettingsContracts
|
|
};
|
|
|
|
NSMODULE_DEFN(SandboxSettingsModule) = &kSandboxSettingsModule;
|
|
|
|
} // namespace mozilla
|