cef_sandbox_win.h File Reference

The sandbox is used to restrict sub-processes (renderer, GPU, etc) from directly accessing system resources. More...

#include "include/base/cef_build.h"

Classes
class	CefScopedSandboxInfo
	Manages the life span of a sandbox information object. More...

Functions
void *	cef_sandbox_info_create (void)
	Create the sandbox information object for this process. More...
void	cef_sandbox_info_destroy (void *sandbox_info)
	Destroy the specified sandbox information object. More...

Detailed Description

The sandbox is used to restrict sub-processes (renderer, GPU, etc) from directly accessing system resources.

This helps to protect the user from untrusted and potentially malicious Web content. See http://www.chromium.org/developers/design-documents/sandbox for complete details.

To enable the sandbox on Windows the following requirements must be met:

1. Use the same executable for the browser process and all sub-processes.
2. Link the executable with the cef_sandbox static library.
3. Call the cef_sandbox_info_create() function from within the executable (not from a separate DLL) and pass the resulting pointer into both the CefExecuteProcess() and CefInitialize() functions via the |windows_sandbox_info| parameter.

Function Documentation

cef_sandbox_info_create()

void* cef_sandbox_info_create

(

void

)

Create the sandbox information object for this process.

It is safe to create multiple of this object and to destroy the object immediately after passing into the CefExecuteProcess() and/or CefInitialize() functions.

cef_sandbox_info_destroy()

void cef_sandbox_info_destroy

(

void *

sandbox_info

)

Destroy the specified sandbox information object.