For various reasons (mostly third party libraries used by my app) I can't afford to link CRT statically.
This means one can't use sandbox because sandbox static library was built with statically linked CRT.
However, I have no such limitation on sub-processes. My sub process app is simple:
- Code: Select all
int APIENTRY wWinMain(_In_ HINSTANCE hInstance,
_In_opt_ HINSTANCE hPrevInstance,
_In_ LPWSTR lpCmdLine,
_In_ int nCmdShow)
{
CefMainArgs main_args(hInstance);
return CefExecuteProcess(main_args, nullptr, nullptr);
}
Per cef_sandbox_win.h:
but then it also states that one must use the same executable for the browser process and all sub-processes.The sandbox is used to restrict sub-processes (renderer, plugin, GPU, etc) from directly accessing system resources