Sign in
chromium
/
chromium
/
src
/
sandbox
/
HEAD
727326f
Start loading msdia140.dll when loading dbghelp.dll
by Devon Loehr
· 5 days ago
main
a9e64af
Add GRO to fieldtrial_testing_config
by Mohannad Farrag
· 5 days ago
8f54579
Enable WinSboxModuleTamperingProtection by default
by Will Harris
· 5 days ago
af0b56a
[unsafe-buffers] Update allow_unsafe_buffers in sandbox/ SUID C files
by Arthur Sonzogni
· 6 days ago
8dcfa32
[sandbox/linux] Fix directory traversal vulnerability
by Greg Thompson
· 6 days ago
86344cd
Enable WinSboxHighGPUJobMemoryLimits by default
by Will Harris
· 10 days ago
997a324
[finch] Remove the three-argument BASE_FEATURE macro everywhere it is
by Julia Hansbrough
· 11 days ago
361c10d
Remove file-issue-extension permission from gpu seatbelt profile
by Bryan Oltman
· 13 days ago
b061f8b
[sandbox/linux] Fix off-by-one DCHECK in BrokerSimpleMessage::WriteBytes
by Karim El Harim
· 3 weeks ago
a663ede
media: make enable of v4l2/vaapi on linux possible
by Jianfeng Liu
· 3 weeks ago
37c67f3
[unsafe-buffers] Sandbox: Use std::array in baseline_policy_unittest
by Arthur Sonzogni
· 3 weeks ago
91b71b3
Fix unsafe buffer usage in seccomp_broker_process_unittest.cc
by Joshua Peraza
· 4 weeks ago
3e19954
[unsafe-buffers] Remove allow_unsafe_buffers from sandbox/
by Arthur Sonzogni
· 4 weeks ago
588d321
Clean up: Fix 5 wrong escapes in 1 DEPS files in sandbox
by yoshiki iguchi
· 5 weeks ago
72d1933
Fix macOS 27 build of `chrome` target
by Victor Hugo Vianna Silva
· 5 weeks ago
c83dc79
Add UNSAFE_BUFFERS macros to C API calls.
by Liza Burakova
· 5 weeks ago
6d5856b
WebNN: Add a dedicated flag to disable the WebNN compiler process sandbox
by mingmingtasd
· 5 weeks ago
b004489
Reland "Fix Javaless Renderer bugs"
by Sam Maier
· 5 weeks ago
7868c25
Revert "Fix Javaless Renderer bugs"
by luci-bisection@appspot.gserviceaccount.com
· 5 weeks ago
8606397
Fix Javaless Renderer bugs
by Sam Maier
· 5 weeks ago
90bdb71
WebNN: Align WebNN Compiler job memory limit with the renderer process
by mingmingtasd
· 5 weeks ago
4273744
sandbox: Allow recvmmsg in seccomp sandbox on Linux
by Mohannad Farrag
· 5 weeks ago
a9d727a
[macOS] Guard ODME process directory access behind flag
by Bryan Oltman
· 6 weeks ago
859a487
[macOS] Guard network process directory access behind flag
by Bryan Oltman
· 6 weeks ago
18a3f72
[WebNN] Tighten model-compilation utility sandbox to USER_LOCKDOWN
by Rafael Cintron
· 7 weeks ago
974cb22
fix: UsePerformanceHelper affinity mode
by Richard Townsend
· 7 weeks ago
db7ad29
Remove code supporting macOS 12 from sandbox
by Avi Drissman
· 7 weeks ago
0bc587e
Harden Speech Recognition Utility Process Sandbox on Windows
by Evan Liu
· 8 weeks ago
43b6b0c
[tracing] Migrate async track events to more appropriate alternatives in sandbox/win
by Etienne Pierre-doray
· 9 weeks ago
b97abb9
Migrate SysInfo::AmountOfPhysicalMemory callers to AmountOfTotalPhysicalMemory in sandbox/policy/win
by Joe Mason
· 9 weeks ago
7596fc4
fix: remove incorrect flag from sandbox/ test
by Richard Townsend
· 9 weeks ago
026845c
Disable BaselinePolicyAndroid.SchedSetAffinity_Maybe_Allowed
by Masa Fujita
· 9 weeks ago
ea341c6
[Gardener] Disable SchedGetAffinity_Maybe_Allowed test.
by Filipa Senra
· 9 weeks ago
534adc7
Revert "[Gardening] Fix BaselinePolicyAndroid affinity test"
by Ivana Žužić
· 10 weeks ago
9c0871b
[Gardening] Fix BaselinePolicyAndroid affinity test
by Ivana Žužić
· 10 weeks ago
d7337e5
Remove setPreferPowerEfficiency experiment
by Richard Townsend
· 10 weeks ago
4c39da1
Migrate SysInfo::AmountOfPhysicalMemory callers to AmountOfTotalPhysicalMemory in sandbox/policy/linux
by Joe Mason
· 10 weeks ago
d197319
[macOS] Deny distributed notifications in the renderer sandbox
by Bryan Oltman
· 2 months ago
d407c40
Run `gn format` on all BUILD.gn files.
by Matt Stark
· 3 months ago
1ec9592
Move test-only GetNtPathFromWin32Path into test file
by Emily Stark
· 3 months ago
272ebff
Reland "Fix mmap seccomp policy in speech recognition sandbox"
by Andrew Paseltiner
· 3 months ago
f8acb8c
Revert "Fix mmap seccomp policy in speech recognition sandbox"
by Ian Wells
· 3 months ago
37259f7
Fix mmap seccomp policy in speech recognition sandbox
by Andrew Paseltiner
· 3 months ago
d072df6
WebNN: Add kWebNNModelCompilation sandbox type
by mingmingtasd
· 3 months ago
2c9c12e
seccomp: Add a test to ensure long term feature detection
by Primiano Tucci
· 3 months ago
0b13e47
[sandbox] Fix SYS_SECCOMP conflict with newer glibc
by Ho Cheung
· 3 months ago
3c404be
Reland "Remove dependency on ATL Security objects"
by Chris Davis
· 4 months ago
2492a93
[sandbox] Enable Module Tampering Protection for CIG processes
by Klaus
· 4 months ago
5d45cbe
Revert "Remove dependency on ATL Security objects"
by Justin Lulejian
· 4 months ago
d6ded81
Remove dependency on ATL Security objects
by Chris Davis
· 4 months ago
9da15ab
Allow PI futex operations on Android in the sandbox.
by Primiano Tucci
· 4 months ago
68cd6a7
Add akhna & ellyjones to sandbox/linux/OWNERS
by Alex Gough
· 4 months ago
597bd6b
[Sandbox] Add a feature to remove the job memory limit for GPU
by Jiawei Shao
· 4 months ago
9bba534
Fix various IWYU errors related to base/logging.h
by Daniel Cheng
· 4 months ago
37aaf1a
[sandbox] Update seccomp-bpf filters for arm64 glibc
by Tom Anderson
· 4 months ago
68f7598
[task] Inject ThreadDelegate through Thread constructor
by Etienne Pierre-doray
· 4 months ago
815e874
Cleanup: Remove histogram macros header includes in sandbox
by Alexei Svitkine
· 4 months ago
2ee2cbb
Tighten macOS GPU sandbox restrictions
by Dale Curtis
· 5 months ago
eb6cc9a
Revert "Reland "Enable network sandbox by default on Windows""
by Will Harris
· 5 months ago
0bbf2e0
[Windows] Remove legacy TestRunner code from the sandbox tests.
by James Forshaw
· 5 months ago
e2a5f67
Reland "Enable network sandbox by default on Windows"
by Will Harris
· 5 months ago
ab1e3e9
Convert to UNSAFE_TODO in sandbox
by Arthur Sonzogni
· 5 months ago
fc6163b
[Windows] Refactor remaining old style TestRunner integration tests.
by James Forshaw
· 5 months ago
b4a606e
[Windows] Refactor integration tests for process mitigations.
by James Forshaw
· 5 months ago
1eae871
spanification: automatically spanify sandbox/linux/bpf_dsl/test_trap_registry_unittest.cc etc.
by Francisco Ochoa
· 5 months ago
88e03e3
[Windows] Refactor integration tests for IPC, LPC, Warmup and Handles.
by James Forshaw
· 5 months ago
ffe1f92
[Windows] Refactor sandbox validation tests.
by James Forshaw
· 5 months ago
f2387b2
[Windows] Refactor integration tests for ZeroAppShim and DLL unloading.
by James Forshaw
· 5 months ago
9e6fda1
[Windows] Refactor integration tests for integrity levels.
by James Forshaw
· 5 months ago
94a49cc
[Windows] Refactor integration tests for IPC, Handle Closer, ASAN.
by James Forshaw
· 5 months ago
59415c2
[Windows] Refactor integration tests for AppContainer.
by James Forshaw
· 5 months ago
2ab77c9
Allow MCAST_JOIN/LEAVE_SOURCE_GROUP in network service seccomp filter
by Omar Ramadan
· 5 months ago
a6b198e
[Windows] Update sandbox policy rule fuzzer to use wstring_view.
by James Forshaw
· 5 months ago
b82014a
[Windows] Update select tests to use new TestRunner API.
by James Forshaw
· 5 months ago
831481e
[Windows] Implement new sandbox test runner API.
by James Forshaw
· 5 months ago
065e9b4
[Windows] Rework TestRunner dispatch and remove unsafe buffers.
by James Forshaw
· 5 months ago
faf36c3
[Windows] Use base::CommandLine in SpawnTargetAsync.
by James Forshaw
· 5 months ago
10dec33
[Windows] Use string_view for sandbox policy interface.
by James Forshaw
· 5 months ago
4f48746
[Windows] Convert Sid class to using wstring_view and span.
by James Forshaw
· 6 months ago
114deb3
[Okta SSO] Execute URLSessionURLLoader in the Network Service
by Stanisław Solarewicz
· 6 months ago
469b8b6
[Windows] Directly initialize Windows sandbox IPC calls.
by James Forshaw
· 6 months ago
d494b52
[Windows] Convert sandbox IPC to use span and remove IPCInt.
by James Forshaw
· 6 months ago
a1039f6
[Windows] Remove unsafe buffer usage and use variants in IPC arguments.
by James Forshaw
· 6 months ago
d803493
[Windows] Remove unused sandbox policy opcodes.
by James Forshaw
· 6 months ago
3cbdabd
Directly link NtQueryInformationProcess
by Alex Gough
· 6 months ago
92a2f12
[Windows] Remove unnecessary process handle from OpenProcessToken IPC.
by James Forshaw
· 6 months ago
126ca72
[Windows] Remove sandbox policy evaluation options.
by James Forshaw
· 6 months ago
3b1c8fd
[Windows] Remove Unsafe Buffer Usage from Sandbox Policy.
by James Forshaw
· 6 months ago
36b6c4c
[Windows] Modernize C++ in Sandbox Policy Rules.
by James Forshaw
· 6 months ago
804f34a
[base] Spanify UnixDomainSocket::RecvMsg()
by Mikel Astiz
· 6 months ago
d6f041a
[Windows] Maintain ACL Auto Inherit Flags in SecurityDescriptor.
by James Forshaw
· 6 months ago
5e2860d
Plumb browser's Security Attribute Name from //chrome to //sandbox
by Will Harris
· 6 months ago
9d6397c
[base] Spanify UnixDomainSocket::SendMsg()
by Mikel Astiz
· 6 months ago
ee302ba
Add missing test for GENERIC_EXECUTE in restricted tokens
by Will Harris
· 6 months ago
7162d53
[Windows] Spanify and cleanup some Windows access control utilities.
by James Forshaw
· 6 months ago
8ee4cbd
Reland "[base] Introduce base::PickleIterator::WithData()"
by Mikel Astiz
· 6 months ago
d0a89af
Revert "[base] Introduce base::PickleIterator::WithData()"
by Scott Haseley
· 6 months ago
fedebbb
[base] Introduce base::PickleIterator::WithData()
by Mikel Astiz
· 6 months ago
9c9796e
Allow GENERIC_EXECUTE when running with isolation security attribute
by Will Harris
· 6 months ago
5a1855a
Remove sandbox_init_win code
by Will Harris
· 6 months ago
Next »