Sandboxie Forum - Chrome Drag and Drop 3.63.03 64bit (12184)

tzuk:

Mon Jan 30, 2012 4:52 pm

Unfortunately I couldn't fix that. OpenWinClass=# means that Sandboxie doesn't try to manage the windows, which means drag-and-drop might fail in some cases. I made a note about this in the Known Conflicts page.

tzuk:

Thu Jan 05, 2012 11:23 am

Good find incognito555, nice work. I will see if I can fix drag and drop to work even when OpenWinClass=# is in effect.

incognito555:

Thu Jan 05, 2012 12:52 am

I was using a clean VM with chrome & sandboxie to test if drag and drop worked...it did. So I import my real sandboxie ini config and it stopped working and I narrowed down the problem to "OpenWinClass=#" [code:1:e730196968]http://www.sandboxie.com/index.php?OpenWinClass OpenWinClass=# This setting tells Sandboxie to not alter window class names created by sandboxed programs. Normally, Sandboxie translates class names such as IEFrame to Sandbox:DefaultBox::IEFrame in order to better separate windows that belong to sandboxed programs from the rest of the windows in the system. However, in some cases, a program outside the sandbox might expect window class names to have a specific name, and therefore might not recognize the windows created by a sandboxed program. Specifying OpenWinClass=# resolves this problem, at the cost of a lesser degree of separation. Note that OpenWinClass=# does not allow communication with any windows outside the sandbox. [/code:1:e730196968] [quote:e730196968]Note that OpenWinClass=# does not allow communication with any windows outside the sandbox.[/quote:e730196968] I'm assuming this prevents communication to and from.

Guest10:

Wed Jan 04, 2012 11:37 pm

Maybe it's the program Strokeit, that is the problem. Is it installed in the VM?

incognito555:

Wed Jan 04, 2012 8:21 pm

Found the problem. Did some A/B testing on a Virtual Machine, it was working fine in VM until I imported my real sandboxie ini and then and drag stops working, finally narrowed down the problem to the global template strokeit. When it's enabled it prevents drag and drop to a sandboxed chrome from working (and possibly other applications) [Template_StrokeIt] Tmpl.Title=StrokeIt Tmpl.Class=Desktop Tmpl.Url=http://www.tcbmi.com/strokeit/ Tmpl.Scan=w OpenWinClass=StrokeIt OpenWinClass=#

tzuk:

Wed Jan 04, 2012 11:42 am

If you see a "no drop" icon then you might have a different problem. What I address was the issue of the drop operation being accepted, but doing nothing. I'm not sure how to explain that your Chrome is blocking drop altogether.

incognito555:

Tue Jan 03, 2012 8:49 pm

No drop icon. --------------- These two lines below added to config let it work though: OpenIpcPath=chrome.exe,\RPC Control\OLE* OpenIpcPath=chrome.exe,\RPC Control\epmapper and then no problem: Ipc ------------------------------- Ipc O \RPC Control\OLE428FA30DCC8B45C2ADCE6B5B3295 Ipc O \RPC Control\OLE9B30535543E941779E26903B2B95 ------------ This line below is just to drag links out of the sandboxed chrome. OpenIpcPath=chrome.exe,\Sessions\*\BaseNamedObjects\DragDrop*

tzuk:

Tue Jan 03, 2012 1:08 pm

Do you see a "no drop" icon, or does the drop seem to succeed and then just doesn't do anything?

incognito555:

Tue Jan 03, 2012 6:38 am

I can't drag into a defaulted settings sandboxed Chrome or IE, such as imgur or google documents without those settings.

Guest10:

Tue Jan 03, 2012 12:08 am

]]>Quoting incognito555: ]]>But I was under the impression that this was problem tzuk was trying to fix. ]]>No, the only drag and drop that is allowed would be from the unsandboxed system into a sandboxed program's window. Drag and drop from a sandboxed program to a location outside of the sandbox has never been allowed. I don't know anything about add-ons that are available for Chrome. For Firefox I use the add-on "deskCut" which can save a .url shortcut to the Desktop, and I allow the .url shortcut to go to the real Desktop if Firefox is creating it: OpenFilePath=firefox.exe,%Desktop%\*.url

incognito555:

Mon Jan 02, 2012 10:41 pm

Yes I am trading a little bit on convenience over security. Chrome itself has its own sandbox so I'm not concerned. But I was under the impression that this was problem tzuk was trying to fix. http://www.sandboxie.com/phpbb/viewtopic.php?t=10741 http://www.sandboxie.com/phpbb/viewtopic.php?t=8912

Guest10: Re: Chrome Drag and Drop 3.63.03 64bit

Sun Jan 01, 2012 6:41 pm

]]>Quoting incognito555: ]]>This will allow drag and drop support and allow you to drag the favicon next to the chrome url bar to the desktop to create a shortcut. ]]>So, if I understand the intent, you are allowing drag and drop from sandboxed Chrome to the unsandboxed system? Something that Sandboxie is programmed to disallow by default, because of the vulnerability it represents.

D1G1T@L:

Sun Jan 01, 2012 4:44 pm

I don't think it's advisable to create openfilepaths to these resources as they will lessen your security.

incognito555: Chrome Drag and Drop 3.63.03 64bit

Sun Jan 01, 2012 4:16 pm

Anyone else having problems with drag and drop in Chrome with google documents or imgur.com I reverted back to my old settings which allow it to function. This will allow drag and drop support and allow you to drag the favicon next to the chrome url bar to the desktop to create a shortcut. OpenIpcPath=chrome.exe,\Sessions\*\BaseNamedObjects\DragDrop* OpenIpcPath=chrome.exe,\RPC Control\OLE* OpenIpcPath=chrome.exe,\RPC Control\epmapper