JCEF and Sandboxing disabled

[Phylanx]

Hi!

With my problem on printing SVGs with fill:rgba style and also PDFs with shaded graphics I wanted to know...
Is there a reason why JCEF turns off the Chromium sandboxing?

see code src/native/context.cpp:192:

Code: Select all

settings.no_sandbox = true;


The comments above:

Code: Select all

  // Sandbox is not supported because:
  // - Use of a separate sub-process executable on Windows.
  // - Use of a temporary file to communicate custom schemes to the
  //   renderer process.


Is the separate sub-process executable on Windows the problem that Chromium is initialized by java.exe and subprocesses should run with jcef_helper.exe?
And I can't say anything about the "Use of a temporary file to communicate custom schemes to the renderer process" point.

Is this still a problem and can't be achieved in another more chromium (including sandboxing) way?
What would have to be done to enable sandboxing for JCEF?

[magreenblatt]

Is this still a problem and can't be achieved in another more chromium (including sandboxing) way?

Yes

What would have to be done to enable sandboxing for JCEF?

The “no sandboxing with separate sub-process executable” requirement may go away with https://github.com/chromiumembedded/cef/issues/3824

[Phylanx]

had a short view into that cef issue...
well, that's a big work in progress if I interpreted it correctly ^^

I hope then that the chromium bug I filed for this gives some answers or even solutions!

Thank you so far!