Google starts sandboxing Flash in Chromium; Chrome soon
updated 09:30 am EST, Thu December 2, 2010
Google sandboxes Flash in Chrome for Windows first
Google late Wednesday revealed that it has acted on its longstanding promise to sandbox Flash in its web browser. Starting with the open-source Chromium version for Windows, Adobe's plugin will block off access to certain vital parts of the browser code to prevent some if not most security exploits. Although not mentioned, it should also reduce the likelihood of Flash crashing the browser by preventing it from affecting more vital parts of the app.
The search firm didn't say when it would port the sandboxing to the Mac or to Chrome. Builds of Chromium are often used as testbeds for developers shortly before they reach semi- and fully stable versions of Chrome.
Other browsers have already been sandboxing Flash both for security and stability reasons. Apple was one of the first, starting with Safari, but has since been followed by newer versions of Firefox. The plugin has been preinstalled in Chrome for months, although the need to isolate it has been somewhat reduced since Chrome was already running each browser tab as a separate process and sandboxing both certain HTML and JavaScript, limiting the effect of a Flash security hole compared to other platforms.




Forum Regular
Joined: Aug 2001
um
Shouldn't that be done for all plugins, not just flash?