6 ms·

> Flash and Media Plugins (video decoders, EME/DRM) have already been sandboxed for several releases. Firefox provides its own sandboxing now? Flash used to u

> Flash and Media Plugins (video decoders, EME/DRM) have already been sandboxed for several releases. Firefox provides its own sandboxing now? Flash used to use a subset of the Chrome sandbox for Flash but that was restricted to the 32-bit version of the browser. As far as I was aware Firefox just ran it in the plugin-container processes for crash protection and nothing else (if protected mode wasn't being used or if you were on 64-bit Firefox). Does Firefox now make use of OS mitigations and integrity levels for sandboxing the plugin process?

cpeterso 10y ago
Like you say, Adobe's Flash sandbox (aka "Protected Mode", based on Chrome's sandbox library) only supports 32-bit Windows. Mozilla wrote its own plugin sandbox for 64-bit Windows because we didn't want to Firefox users to lose sandboxing just because they switched from 32-bit to 64-bit. Adobe's and Mozilla's sandboxes don't use all the same mitigations and some Flash content is currently broken in 64-bit Firefox. Here is the Firefox bug tracking the 64-bit sandbox work: https://bugzilla.mozilla.org/show_bug.cgi?id=1165891 https://bugzilla.mozilla.org/show_bug.cgi?id=1165891