Bug 1125891 - Enable the no-admin sandbox for Flash. r=bobowen, a=sledru
authorBenjamin Smedberg <benjamin@smedbergs.us>
Mon, 26 Jan 2015 13:25:15 -0500
changeset 243591 6dbb4d7aa57d
parent 243590 78a8db05e964
child 243592 adbc58813581
push id4406
push userryanvm@gmail.com
push date2015-01-29 21:23 +0000
treeherdermozilla-beta@cf270a9a66ad [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersbobowen, sledru
bugs1125891
milestone36.0
Bug 1125891 - Enable the no-admin sandbox for Flash. r=bobowen, a=sledru
browser/app/profile/firefox.js
--- a/browser/app/profile/firefox.js
+++ b/browser/app/profile/firefox.js
@@ -1196,17 +1196,17 @@ pref("dom.ipc.plugins.enabled", true);
 pref("browser.tabs.remote.autostart", false);
 pref("browser.tabs.remote.desktopbehavior", true);
 
 #if defined(XP_WIN) && defined(MOZ_SANDBOX)
 // Controls whether the Windows NPAPI plugin process is sandboxed by default.
 // To get a different setting for a particular plugin replace "default", with
 // the plugin's nice file name, see: nsPluginTag::GetNiceFileName.
 pref("dom.ipc.plugins.sandbox.default", false);
-pref("dom.ipc.plugins.sandbox.flash", false);
+pref("dom.ipc.plugins.sandbox.flash", true);
 #endif
 
 #if defined(MOZ_CONTENT_SANDBOX) && defined(XP_WIN)
 // This controls whether the content process on Windows is sandboxed.
 // You also need to be using remote tabs, see above.
 // on = full sandbox enabled
 // warn = warn only sandbox enabled
 // anything else = sandbox disabled