天道酬勤,学无止境

epm

有没有办法从 IE11 上的 AppContainer BHO 创建命名管道?(Is there a way to create a named pipe from an AppContainer BHO on IE11?)

问题 我正在尝试为 Internet Explorer 11 (Windows 8.1) 编写 BHO。 我的 BHO 实现了 AppContainer 沙箱,但我似乎无法创建命名管道, CreateNamedPipe失败并显示以下消息: Access is denied. 这是我用来创建命名管道的代码(我在俄罗斯网站上找到的,最后一条评论: LPCWSTR LOW_INTEGRITY_SDDL_SACL_W = L"S:(ML;;NW;;;LW)D:(A;;0x120083;;;WD)(A;;0x120083;;;AC)"; PSECURITY_DESCRIPTOR pSD = NULL; ConvertStringSecurityDescriptorToSecurityDescriptorW ( LOW_INTEGRITY_SDDL_SACL_W, SDDL_REVISION_1, &pSD, NULL ); if ( pSD != NULL) { SECURITY_ATTRIBUTES SecurityAttributes; SecurityAttributes.nLength = sizeof(SECURITY_ATTRIBUTES); SecurityAttributes.bInheritHandle = TRUE; SecurityAttributes

2021-11-19 04:18:58    分类:技术分享    internet-explorer   bho   internet-explorer-11   epm   appcontainer

Is there a way to create a named pipe from an AppContainer BHO on IE11?

I'm trying to write a BHO for Internet Explorer 11 (Windows 8.1). My BHO implements the AppContainer sandbox, but I can't seem to create a Named Pipe, CreateNamedPipe fails with that message: Access is denied. Here's the code I'm using to create the named pipe (which I found on a russian website, last comment: LPCWSTR LOW_INTEGRITY_SDDL_SACL_W = L"S:(ML;;NW;;;LW)D:(A;;0x120083;;;WD)(A;;0x120083;;;AC)"; PSECURITY_DESCRIPTOR pSD = NULL; ConvertStringSecurityDescriptorToSecurityDescriptorW ( LOW_INTEGRITY_SDDL_SACL_W, SDDL_REVISION_1, &pSD, NULL ); if ( pSD != NULL) { SECURITY_ATTRIBUTES

2021-11-15 21:49:11    分类:问答    internet-explorer   bho   internet-explorer-11   epm   appcontainer

从 IE EPM BHO 中访问命名管道服务器(Accessing named pipe servers from within IE EPM BHO)

问题 我正在尝试对我们的旧产品进行一些更改,以支持 BHO 上的 IE EPM。 我设法让它加载并且各种方法 - SetSite、DocumentComplete 等 - 被调用。 在尝试连接到在 Windows 服务中运行的命名管道服务器时,我似乎遇到了障碍。 以前,我们已经进行了更改以允许处于保护模式的 IE BHO 访问命名管道服务器 - 使用 LOW_INTEGRITY_SDDL_SACL ("S:(ML;;NW;;;LW)")。 在代码中,我们使用 ConvertStringSecurityDescriptorToSecurityDescriptor 方法创建安全描述符,然后在实际 SD 或 SECURITY_ATTRIBUTES 对象上执行 SetSecurityDescriptorSacl。 这允许 BHO 代码访问托管在 SYSTEM 服务中的命名管道服务器。 我参考了几篇文章,可能最有用的是这篇文章 - 有没有办法从 IE11 上的 AppContainer BHO 创建命名管道? 我对 SDDL 进行了一些更改,现在看起来像 - #define EPM_INTEGRITY_SDDL L"S:(ML;;NW;;;LW)D:(A;;FA;;;SY)(A;;FA;;;WD)(A;;FA;;;AC)" 这基本上为 DACL 部分中的每个人

2021-10-08 04:13:39    分类:技术分享    internet-explorer   internet-explorer-11   bho   epm   appcontainer

Accessing named pipe servers from within IE EPM BHO

I am trying to make some changes to our legacy product to support IE EPM on the BHO. I have managed to get it to load and the various methods - SetSite, DocumentComplete etc. - get invoked. I seem to be hitting a snag when trying to connect to the named pipe server running inside a Windows Service. Previously, we had already made changes to allow IE BHO in protected mode to access the named pipe server - using LOW_INTEGRITY_SDDL_SACL ("S:(ML;;NW;;;LW)"). Within the code, we were using creating the security descriptor using the ConvertStringSecurityDescriptorToSecurityDescriptor method, then

2021-08-31 06:22:50    分类:问答    internet-explorer   internet-explorer-11   bho   epm   appcontainer