Chromium Embedded Framework (CEF)  114.2.1+gd70a0a8+chromium-114.0.5735.45
cef_sandbox_win.h File Reference

The sandbox is used to restrict sub-processes (renderer, GPU, etc) from directly accessing system resources. More...

Classes

class  CefScopedSandboxInfo
 Manages the life span of a sandbox information object. More...
 

Functions

void * cef_sandbox_info_create (void)
 Create the sandbox information object for this process. More...
 
void cef_sandbox_info_destroy (void *sandbox_info)
 Destroy the specified sandbox information object. More...
 

Detailed Description

The sandbox is used to restrict sub-processes (renderer, GPU, etc) from directly accessing system resources.

This helps to protect the user from untrusted and potentially malicious Web content. See http://www.chromium.org/developers/design-documents/sandbox for complete details.

To enable the sandbox on Windows the following requirements must be met:

  1. Use the same executable for the browser process and all sub-processes.
  2. Link the executable with the cef_sandbox static library.
  3. Call the cef_sandbox_info_create() function from within the executable (not from a separate DLL) and pass the resulting pointer into both the CefExecuteProcess() and CefInitialize() functions via the |windows_sandbox_info| parameter.

Function Documentation

◆ cef_sandbox_info_create()

void* cef_sandbox_info_create ( void  )

Create the sandbox information object for this process.

It is safe to create multiple of this object and to destroy the object immediately after passing into the CefExecuteProcess() and/or CefInitialize() functions.

◆ cef_sandbox_info_destroy()

void cef_sandbox_info_destroy ( void *  sandbox_info)

Destroy the specified sandbox information object.