Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 0 additions & 17 deletions patches/disable-gssapi-to-enable-network-service-sandbox.patch
Original file line number Diff line number Diff line change
Expand Up @@ -16,20 +16,3 @@ index 249ff5ecffa8d..c9c36e3226290 100644
}
#endif // BUILDFLAG(IS_LINUX)

diff --git a/services/network/public/mojom/network_service.mojom b/services/network/public/mojom/network_service.mojom
index 3f3dac717be42..29a9946052308 100644
--- a/services/network/public/mojom/network_service.mojom
+++ b/services/network/public/mojom/network_service.mojom
@@ -95,7 +95,11 @@ struct HttpAuthDynamicParams {

// Indicates whether the GSSAPI library should be loaded. Only supported on
// Chrome OS and Linux.
- bool allow_gssapi_library_load = true;
+ // GSSAPI will disable the Network Service Sandbox when websites try to load
+ // it, not desirable from a security perspective.
+ bool allow_gssapi_library_load = base::CommandLine::
+ ForCurrentProcess()->HasSwitch(
+ "enable-gssapi"));

// True if Basic authentication challenges should be allowed for non-secure
// HTTP responses.