Bug 1125891 - Enable the no-admin sandbox for Flash. r=bobowen, a=sledru
authorBenjamin Smedberg <benjamin@smedbergs.us>
Mon, 26 Jan 2015 13:25:15 -0500
changeset 243591 6dbb4d7aa57d15430f7a57422c38c65e61f5543b
parent 243590 78a8db05e96478eabe5cce1e264d16ef1f6bfad2
child 243592 adbc588135810cd6bc4c2eda68c2c9f3ef4f5863
push id4406
push userryanvm@gmail.com
push dateThu, 29 Jan 2015 21:23:00 +0000
treeherdermozilla-beta@cf270a9a66ad [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersbobowen, sledru
Bug 1125891 - Enable the no-admin sandbox for Flash. r=bobowen, a=sledru
--- a/browser/app/profile/firefox.js
+++ b/browser/app/profile/firefox.js
@@ -1196,17 +1196,17 @@ pref("dom.ipc.plugins.enabled", true);
 pref("browser.tabs.remote.autostart", false);
 pref("browser.tabs.remote.desktopbehavior", true);
 #if defined(XP_WIN) && defined(MOZ_SANDBOX)
 // Controls whether the Windows NPAPI plugin process is sandboxed by default.
 // To get a different setting for a particular plugin replace "default", with
 // the plugin's nice file name, see: nsPluginTag::GetNiceFileName.
 pref("dom.ipc.plugins.sandbox.default", false);
-pref("dom.ipc.plugins.sandbox.flash", false);
+pref("dom.ipc.plugins.sandbox.flash", true);
 #if defined(MOZ_CONTENT_SANDBOX) && defined(XP_WIN)
 // This controls whether the content process on Windows is sandboxed.
 // You also need to be using remote tabs, see above.
 // on = full sandbox enabled
 // warn = warn only sandbox enabled
 // anything else = sandbox disabled