Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sandboxie-Plus 1.2.6 will not load any webpage on any browser #2084

Closed
NotepadPlusUser opened this issue Jul 31, 2022 · 3 comments
Closed

Sandboxie-Plus 1.2.6 will not load any webpage on any browser #2084

NotepadPlusUser opened this issue Jul 31, 2022 · 3 comments
Labels
Duplicate This issue or pull request already exists Software: ESET SBIE issues in conjunction with ESET software

Comments

@NotepadPlusUser
Copy link

Describe what you noticed and did

I can't locate my post a week ago on V1.2.5 in either the Open or the Closed Issues, so I will have to start again. The problem now is a little different.

I checked that V1.2.6 is now marked as the official release in the coloured boxes at https://github.com/sandboxie-plus/Sandboxie ,
so I dared to download and install it. There was a certificate permission required for certification when I first launched Vivaldi in a sandbox, but otherwise Vivaldi opened properly in a sandbox.

PROBLEM: No webpage even begins to load.

I closed down the VPN, and tried in succession Vivaldi, Firefox, Edge, Brave and IE in various sandboxes. No further permissions were required, and again no webpage ever even began to load.

But everything opened OK outside the sandboxes using the switch /dfp in the command line.

I will go back to V1.1.3 once again, but I have no idea what the problem is. I should mention again that the problems that I reported in
#1835
persist in V1.1.3 .

How often did you encounter it so far?

As above

Affected program

All five browsers are up to date

Download link

Not relevant

Where is the program located?

The program is installed only outside the sandbox.

Expected behavior

As above

What is your Windows edition and version?

64-bit Windows 10 Pro 21H2 V10.0.19044.1865 (updated today)

In which Windows account you have this problem?

A local or Microsoft account without special changes.

Please mention any installed security software

ESET internet Security V15.2.11.0

What version of Sandboxie are you running?

Sandboxie-Plus V 1,2,6

Is it a new installation of Sandboxie?

I just updated Sandboxie from a previous version (to be specified).

Is it a regression?

I previously installed 1.2.0, 1,2,1, 1,2,5, all of which had problems, and each time I reverted to V1.1.3.

In which sandbox type you have this problem?

Not relevant to my request.

Can you reproduce this problem on an empty sandbox?

I can confirm it also on an empty sandbox.

Did you previously enable some security policy settings outside Sandboxie?

No

Crash dump

No response

Trace log

No response

Sandboxie.ini configuration

No response

@NotepadPlusUser NotepadPlusUser added the Confirmation Pending Further confirmation is requested label Jul 31, 2022
@isaak654
Copy link
Collaborator

isaak654 commented Jul 31, 2022

There is a known limitation about SandboxieLogon=y, which is applied internally by default from v1.2.0 / 5.57.0 to v1.2.6 / 5.57.6: #2025

Also mentioned 4 days ago in the v1.2.6 / 5.57.6 release page:
v1.2.6_issue

See also #2064 for further explanation about the feature.

You can uncheck it from the Sandboxie-Plus UI in Options menu -> Global Settings -> Advanced Config.
That will write SandboxieLogon=n under [GlobalSettings] in Sandboxie.ini.

Otherwise, you could just wait and install v1.2.7 which is expected to disable the behavior automatically.

Personally I'm against both measures, because they actually lower fundamental Sandboxie protection against cross-sandbox attacks in favour of Sandboxie users who don't accurately report issues like this to the third-party security vendors.

@isaak654 isaak654 added Duplicate This issue or pull request already exists Software: ESET SBIE issues in conjunction with ESET software and removed Confirmation Pending Further confirmation is requested labels Jul 31, 2022
@isaak654 isaak654 marked this as a duplicate of #2025 Jul 31, 2022
@bastik-1001
Copy link
Collaborator

Just to increase the chance of people affected by this bug, get to see another solution, David stated that:

(...)
you can even do the following
add SandboxieLogon=y globally
and SandboxieLogon=n to he box you run your browser in,
and et voila boxes are isolated and browser still works with ssl scanning

@DavidXanatos
Copy link
Member

in 1.2.7 this option is off by default so i'll close this topic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Duplicate This issue or pull request already exists Software: ESET SBIE issues in conjunction with ESET software
Projects
None yet
Development

No branches or pull requests

4 participants