Chrome's Flash implementation now fully sandboxed, internal settings coming
Google is continuing its work on integrating Adobe's Flash Player into the Chrome browser. While the company has made great progress in recent time in doing so, the developers today announced that they have fully sandboxed Chrome's Flash implementation on all versions of the Windows operating system.
Chrome developer Justin Schuh posted the news on his own Twitter account stating that the Chrome 21 beta release "has fully sandboxed Flash on all versions of Windows ". A fully sandboxed version of Flash in Chrome isolates the plugin from the browser core, other browser processes, and the operating system. A fully sandboxed Flash plugin makes it more difficulty for attackers to take advantage of vulnerabilities in Flash as the underlying system and browser core is better protected.
Since the fully sandboxed version of Flash is currently available in Chrome 21 Beta, it means that stable users will have to wait some more until their browser moves to that version of Chrome.
Some beta users are reporting issues with Flash contents on YouTube and other sites. While it is not clear if this has been caused by the improved sandboxing feature, they may be related. Still, it is a beta product and bugs and issues are to be expected.
Google is also preparing another Flash-related improvement for its Chrome browser. According to François Beaufort, the company is going to integrate - at least part of - the Adobe Flash Player control panel into the browser natively. As of right now Flash settings can only be modified on the Adobe website.
Two new features are already available for Google Chrome Canary users: first a new Flash camera and microphone preference under Content Settings, and second a deauthorize content licenses option under Clear Browsing Data.
It is likely that Google will improve Flash support further in future versions of the browser.Advertisement