public final class Sandbox
extends com.aspose.html.internal.ms.System.Enum
A sandboxing flag set is a set of zero or more of the following flags, which are used to restrict the abilities that potentially untrusted resources.
Modifier and Type | Field and Description |
---|---|
static int |
AutomaticFeatures
This flag blocks features that trigger automatically, such as automatically playing a video or automatically focusing a form control.
|
static int |
AuxiliaryNavigation
This flag prevents content from creating new auxiliary browsing contexts, e.g. using the target attribute, or the window.open() method.
|
static int |
DocumentDomain
This flag prevents content from using the document.domain feature to change the effective script origin.
|
static int |
Forms
This flag blocks form submission.
|
static int |
Fullscreen
This flag prevents content from using the requestFullscreen() method.
|
static int |
Images
This flag disables image loading.
|
static int |
Navigation
This flag prevents content from navigating browsing contexts other than the sandboxed browsing context itself (or browsing contexts further nested inside it), auxiliary browsing contexts (which are protected by the sandboxed auxiliary navigation browsing context flag defined next), and the top-level browsing context (which is protected by the sandboxed top-level navigation browsing context flag defined below).
|
static int |
None
No flag is set, every sandbox feature is accepted
|
static int |
Origin
This flag forces content into a unique origin, thus preventing it from accessing other content from the same origin.
|
static int |
Plugins
This flag prevents content from instantiating plugins, whether using the embed element, the object element, the applet element, or through navigation of a nested browsing context, unless those plugins can be secured.
|
static int |
PointerLock
This flag disables the Pointer Lock API.
|
static int |
Scripts
This flag blocks script execution.
|
static int |
TopLevelNavigation
This flag prevents content from navigating their top-level browsing context and prevents content from closing their top-level browsing context.
|
Clone, CloneTo, format, format, get_Caption, get_Value, getName, getNames, getNames, getUnderlyingType, getUnderlyingType, getValue, getValues, isDefined, isDefined, isDefined, isDefined, parse, parse, parse, parse, register, toObject
public static final int None
No flag is set, every sandbox feature is accepted
public static final int Navigation
This flag prevents content from navigating browsing contexts other than the sandboxed browsing context itself (or browsing contexts further nested inside it), auxiliary browsing contexts (which are protected by the sandboxed auxiliary navigation browsing context flag defined next), and the top-level browsing context (which is protected by the sandboxed top-level navigation browsing context flag defined below). If the sandboxed auxiliary navigation browsing context flag is not set, then in certain cases the restrictions nonetheless allow popups (new top-level browsing contexts) to be opened. These browsing contexts always have one permitted sandboxed navigator, set when the browsing context is created, which allows the browsing context that created them to actually navigate them. (Otherwise, the sandboxed navigation browsing context flag would prevent them from being navigated even if they were opened.
public static final int AuxiliaryNavigation
This flag prevents content from creating new auxiliary browsing contexts, e.g. using the target attribute, or the window.open() method.
public static final int TopLevelNavigation
This flag prevents content from navigating their top-level browsing context and prevents content from closing their top-level browsing context. When the sandboxed top-level navigation browsing context flag is not set, content can navigate its top-level browsing context, but other browsing contexts are still protected by the sandboxed navigation browsing context flag and possibly the sandboxed auxiliary navigation browsing context flag.
public static final int Plugins
This flag prevents content from instantiating plugins, whether using the embed element, the object element, the applet element, or through navigation of a nested browsing context, unless those plugins can be secured.
public static final int Origin
This flag forces content into a unique origin, thus preventing it from accessing other content from the same origin.
public static final int Forms
This flag blocks form submission.
public static final int PointerLock
This flag disables the Pointer Lock API.
public static final int Scripts
This flag blocks script execution.
public static final int AutomaticFeatures
This flag blocks features that trigger automatically, such as automatically playing a video or automatically focusing a form control.
public static final int Fullscreen
This flag prevents content from using the requestFullscreen() method.
public static final int DocumentDomain
This flag prevents content from using the document.domain feature to change the effective script origin.
public static final int Images
This flag disables image loading.