Hello,

I am using the new Firefox plugin of the Foxit PDF Reader. However, if I run Firefox in a sandbox the plugin does not work. It uses an OCX (FoxitReaderOCX.ocx). I have tried to grant full access to that OCX in the sandbox settings but without success. Has anybody been successful running this plugin in a sandboxed Firefox?

No problem here.
Choosing to install the "Firefox Plugin" from within Foxit Reader v3 resulted in 3 files in my %Temp% folder:
1. InstallPDFReaderPlugin.exe
2. FoxitReaderOCX.ocx
3. npFoxitReaderPlugin.dll

Items 2 and 3 are copied to
C:\Program Files\Foxit Software\Foxit Reader\Plugins

Item 3 gets copied to
C:\Program Files\Mozilla Firefox\plugins
and that is the copy of the plugin file that Firefox uses.

I'm not sure if there are any Registry entries made - beyond the ones that Foxit Reader saves, as to the location of files 2 and 3 on the hard drive.

When Firefox is running, either unsandboxed or sandboxed, if you type in Firefox's address bar
about:plugins
you should see the Foxit Reader Plugin listed, and Enabled = yes

Having the Adobe Reader plugin already in my list of Firefox's plugins didn't present any problem.
The Foxit Reader plugin was the one that got used, though. I'm not sure why, except that it was listed at the top of the list of plugins when I used "about:plugins".

I have done exactly the same. After the installation from within Foxit Reader I had the files you mentioned in the same directories and within Firefox (unsandboxed or sandboxed) I see the plugin with about:plugins but in the sandboxed Firefox it doesn't work. I always get the following message box:



The Sandboxie support told me that this happens when there is no access either to the OCX or the corresponding registry entries. I have tried from within the Sandbox configuration to grant firefox access to the OCX, the DLL and the registry entries without any success. I am lost

Have you tried deleting the contents of that sandbox, to create a new reghive?

Yes, I always automatically delete the sandbox content after finishing the last program, normally Firefox.

Is it possible to disable the plugin and still have Foxit show PDFs from Firefox?
It might show the PDFs outside the Firefox window (as opposed to within a Firefox tab) but it may be a reasonable solution.

Of course that would be possible but I like the plugin. Considering the alternative of not using the plugin or not using Sandboxie I might rather not use Sandboxie. Another alternative might be to use the Adobe Acrobat reader and plugin but the Foxit Reader is much faster and uses much less resources.

I would appreciate if somebody at Sandboxie could look into that problem.

I'm assuming that you have no restrictions on programs that can Run or access the Internet for the sandbox that you are using with Firefox.
When you use the Foxit Reader plug-in to view a .pdf file in a sandboxed Firefox, an instance of "Foxit Reader.exe" runs in the sandbox, and would need access to the Internet.
-----------------
Judging by your results, I appears to me that the problem is not with Firefox trying to use the plugin.
One final check to make sure the plugin is enabled in the sandboxed Firefox:
Tools > Add-ons > click on "Plugins" at the top of the window.
Verify that "Foxit Reader Plugin For Mozilla" is listed and is not grayed-out.
-----------------
When I use Sandboxie's Access Resource Monitor, I can see that 2 "Clsid" resources are being allowed, by Sandboxie:

Clsid {05563215-225C-45EB-BB34-AFA47217B1DE} FoxitReaderOCX Control
Clsid {14E8BBD8-1D1C-4D56-A4DA-D20B75EB814E} PDF Document

As a guess, maybe something is blocking the first one, for you.
CLSID : {05563215-225C-45EB-BB34-AFA47217B1DE}
ProgID : FOXITREADEROCX.FoxitReaderOCXCtrl.1
Description : FoxitReaderOCX Control
Control : Yes
Status : Enabled
Missing File : No
Product Name : FoxitReaderOCX ActiveX Control Module
Company : Foxit Software Company
File Description : FoxitReaderOCX ActiveX Control Module
File Version : 1, 0, 0, 1
Threading Model : Apartment
Filename : C:\PROGRA~1\FOXITS~1\FOXITR~1\plugins\FOXITR~1.OCX
Modified Date : 1/27/2009 10:06:36 AM

The second one just seems to be some generic item that's in the list of Clsid's
CLSID : {14E8BBD8-1D1C-4D56-A4DA-D20B75EB814E}
ProgID : FoxitReader.Document
Description : PDF Document
Control : No
Status : Enabled
Missing File : No
Product Name :
Company :
File Description :
File Version :
Threading Model :
Filename :
Modified Date : 11/23/2008 10:34:56 AM
-----------------
Perhaps Sandboxie's Access Resource Monitor will show something, in your case.
Just before you try to view a .pdf document in your sandboxed Firefox, open Sandboxie's Control window by double-clicking the tray icon, and then click "File" > "Resource Access Monitor"
Leave that window open and then go back to Firefox and try to view the .pdf file.
If you get your ".OCX" error, go back to the Resource Access Monitor screen and click to copy the text to the clipboard.

Paste the text into a Notepad window and see if the 2 resources that I listed above are there.
Look especially for any "X" after the "Clsid", as in
Clsid X {05563215-225C-45EB-BB34-AFA47217B1DE} FoxitReaderOCX Control
-----
[Edit] Meant to say "might" need Internet access. Thanks, mitch[/Edit]

My Foxit (but with Internet Explorer) requires Run Access but doesn't seem to need to be granted Internet Access. Might be the same here with Firefox. (If you are using Sandboxies' Run and Internet Access settings)

Thank you very much for your detailed analysis. I have used Sandboxies Resource Access Monitor and this is what I get, when I try to open a PDF file:


(Unk) 000000F1 \Device\RasAcd
Clsid -------------------------------
Clsid {05563215-225C-45EB-BB34-AFA47217B1DE} FoxitReaderOCX Control
Clsid {14E8BBD8-1D1C-4D56-A4DA-D20B75EB814E} Foxit Reader Document
Ipc -------------------------------
Ipc \Sessions\1\BaseNamedObjects\__ComCatalogCache__
Ipc \Sessions\1\BaseNamedObjects\OleDfRoot6576EAA9D05453D1
Ipc \Sessions\1\BaseNamedObjects\OleDfRoot8A229F6D3C48D682
Ipc O \KnownDlls\clbcatq.dll
Ipc O \KnownDlls\WLDAP32.dll
Ipc O \RPC Control\DNSResolver
Pipe -------------------------------
Pipe O \Device\Afd
Pipe O \Device\Afd\Endpoint
WinCls -------------------------------
WinCls X LOGI_STROMBOLI_WND_CLASS


The only 'X' is the one in the last line.

Any idea?

Unfortunately, not if the plugin works when unsandboxed but not when sandboxed.

The only thing I can think of at all, is for you to try the Firefox add-on called "PDF Download".
I use it to give me a choice as to whether to open or download a .pdf file, or to choose from its other "Options":

- Open the .pdf using a plugin (which we know won't work for you with Foxit's plugin), in the same tab, a new tab, or a new window.
- Open the document in a new window using the computers' default PDF viewer.
- Open the document in a new window with the PDF viewer program of your choice -> use the add-on's "Options" for "Opening PDF", to Browse to the Foxit Reader.exe program.

The Foxit plugin works fine for me, but you could try adding

{05563215-225C-45EB-BB34-AFA47217B1DE}
and
{14E8BBD8-1D1C-4D56-A4DA-D20B75EB814E}

to Resource Access -> COM Access.

Also make sure "Foxit Reader.exe" is allowed to run in your sandbox (notice the space in the filename).

EDIT:
FYI, I have those 2 CLSID entries in my access monitor also, and I don't need the resource access setting, so...

Just thinking out loud, do you have any other access restrictions in your sandbox? Maybe copy/paste that sandbox's section of your INI here.

Perhaps you would be willing to try the free PDF-XChange Viewer (http://www.docu-track.com/download/PDFXVwer.zip) - it's small and fast like Foxit, has Firefox and IE plugins and once installed outside Sandboxie, works flawlessly for me within it.

My 2c.

Cheers!
D

Well,

Thanks everybody for your suggestions. But so far, nothing worked. I tried the PDF-XChange PDF Viewer but the plugin also doesn't work in a sandboxed firefox. I think I didn't mention that I am using Windows Vista and I think it might be related to that.