
Since at least as far back as macOS 10.13, CoreText and fontd transparently issue a sandbox extension when an application attempts to use a font that is outside of its sandbox. This means it is not necessary for the browser process to load a font on behalf of the render process. Change-Id: I8ba957ccd616ffde73543f95c885be87c361dbd8 Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4205854 Reviewed-by: Robert Sesek <rsesek@chromium.org> Commit-Queue: Mark Rowe <markrowe@chromium.org> Reviewed-by: Dmitry Gozman <dgozman@chromium.org> Cr-Commit-Position: refs/heads/main@{#1099914}
40 lines
1.3 KiB
C++
40 lines
1.3 KiB
C++
// Copyright 2018 The Chromium Authors
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
#ifndef CONTENT_BROWSER_SANDBOX_SUPPORT_MAC_IMPL_H_
|
|
#define CONTENT_BROWSER_SANDBOX_SUPPORT_MAC_IMPL_H_
|
|
|
|
#include "content/common/sandbox_support_mac.mojom.h"
|
|
#include "mojo/public/cpp/bindings/pending_receiver.h"
|
|
#include "mojo/public/cpp/bindings/receiver_set.h"
|
|
|
|
namespace content {
|
|
|
|
// Performs privileged operations on behalf of sandboxed child processes.
|
|
// This is used to implement the blink::WebSandboxSupport interface in the
|
|
// renderer. However all child process types have access to this interface.
|
|
// This class lives on the IO thread and is owned by the Mojo interface
|
|
// registry.
|
|
class SandboxSupportMacImpl : public mojom::SandboxSupportMac {
|
|
public:
|
|
SandboxSupportMacImpl();
|
|
|
|
SandboxSupportMacImpl(const SandboxSupportMacImpl&) = delete;
|
|
SandboxSupportMacImpl& operator=(const SandboxSupportMacImpl&) = delete;
|
|
|
|
~SandboxSupportMacImpl() override;
|
|
|
|
void BindReceiver(mojo::PendingReceiver<mojom::SandboxSupportMac> receiver);
|
|
|
|
// content::mojom::SandboxSupportMac:
|
|
void GetSystemColors(GetSystemColorsCallback callback) override;
|
|
|
|
private:
|
|
mojo::ReceiverSet<mojom::SandboxSupportMac> receivers_;
|
|
};
|
|
|
|
} // namespace content
|
|
|
|
#endif // CONTENT_BROWSER_SANDBOX_SUPPORT_MAC_IMPL_H_
|