3 ms·
How so? I didn't know Adobe gives different sandbox for different browsers? Or do you meant browser's policy with plugin (Flash, java runtime)?
by yeukhon 13y ago
How so? I didn't know Adobe gives different sandbox for different browsers? Or do you meant browser's policy with plugin (Flash, java runtime)?
- modeless 13y agoOriginally Flash ran in the browser process with no sandbox. Then some browsers started running plugins in separate processes, but still not in a sandbox. This allows the browser to survive Flash crashing, but doesn't improve security. Some browsers have gone further and added a sandbox to the Flash process, but I believe that each browser uses its own sandboxing mechanism, with different security properties. Additionally, some browsers now use their built-in updating mechanism to update Flash binaries, instead of relying on Adobe's questionable updater. I'm not too familiar with what other browsers are doing, but I know Chrome's version of Flash is different from other versions and specially built for Chrome. It does not use the NPAPI plugin system. Instead it's built on PPAPI which is designed with multi-process and sandboxing in mind.