From b103a232a9953232dd8b9fd2416b5163a383dd6c Mon Sep 17 00:00:00 2001 From: isaak654 Date: Thu, 1 Jul 2021 21:25:34 +0200 Subject: [PATCH] Add new linked issue tags --- CHANGELOG.md | 226 +++++++++++++++++++++++++++------------------------ 1 file changed, 118 insertions(+), 108 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 46bc3c24..f01f72a1 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,10 +5,13 @@ This project adheres to [Semantic Versioning](http://semver.org/). ## [0.8.2 / 5.50.2] - 2021-06-15 +### Changed +- Split anti-phishing rules per browser (by isaak654) [#910](https://github.com/sandboxie-plus/Sandboxie/pull/910) + ### Fixed -- properly fixed an issue with Driver Verifier and user handles #906 +- properly fixed an issue with Driver Verifier and user handles [#906](https://github.com/sandboxie-plus/Sandboxie/issues/906) - fixed an issue with CreateWindow function introduced with 0.8.0 -- fixed issue with outdated BoxDisplayOrder entries being retained +- fixed issue with outdated BoxDisplayOrder entries being retained [#900](https://github.com/sandboxie-plus/Sandboxie/issues/900) @@ -17,8 +20,8 @@ This project adheres to [Semantic Versioning](http://semver.org/). ### Fixed - fixed an issue with Driver Verifier and user handles - fixed driver memory leak of FLT_FILE_NAME_INFORMATION objects -- fixed broken clipboard introduced in 5.50.0 #899 -- fixed DcomLaunch issue on Windows 7 32 bit introduced in 5.50.0 #898 +- fixed broken clipboard introduced in 5.50.0 [#899](https://github.com/sandboxie-plus/Sandboxie/issues/899) +- fixed DcomLaunch issue on Windows 7 32 bit introduced in 5.50.0 [#898](https://github.com/sandboxie-plus/Sandboxie/issues/898) @@ -28,81 +31,86 @@ This project adheres to [Semantic Versioning](http://semver.org/). - Sandboxie now applies by default "Close...=!,..." directives to non-excluded images if they are located in a sandbox -- added 'AlwaysCloseForBoxed=n' to disable this behaviour as it may not be always desired, and it doesn't provide extra security - added process image information to Sandman UI -- localized template categories in the Plus UI #727 -- added "DisableResourceMonitor=y" to disable resource access monitor for selected boxes -- added option to show trace entries only for the selected sandbox #886 +- localized template categories in the Plus UI [#727](https://github.com/sandboxie-plus/Sandboxie/issues/727) +- added "DisableResourceMonitor=y" to disable resource access monitor for selected boxes [#886](https://github.com/sandboxie-plus/Sandboxie/issues/886) +- added option to show trace entries only for the selected sandbox [#886](https://github.com/sandboxie-plus/Sandboxie/issues/886) - added "UseVolumeSerialNumbers=y" that allows drive letters to be suffixed with the volume SN in the \drive\ sandbox location -- it helps to avoid files mixed together on multiple pendrives using the same letter -- note: this option is not compatible with the recovery function of the Classic UI, only SandMan UI is fully compatible -- added "ForceRestart=PicoTorrent.exe" to the PicoTorrent template in order to fix a compatibility issue #720 +- added "ForceRestart=PicoTorrent.exe" to the PicoTorrent template in order to fix a compatibility issue [#720](https://github.com/sandboxie-plus/Sandboxie/issues/720) +- added localization support for RPC templates (by isaak654) [#736](https://github.com/sandboxie-plus/Sandboxie/issues/736) ### Changed -- portable cleanup message now has yes/no/cancel options #874 +- portable cleanup message now has yes/no/cancel options [#874](https://github.com/sandboxie-plus/Sandboxie/issues/874) - consolidated Proc_CreateProcessInternalW and Proc_CreateProcessInternalW_RS5 to remove duplicate code -- the ElevateCreateProcess fix, as sometimes applied by the Program Compatibility Assistant, will no longer be emulated by default +- the ElevateCreateProcess fix, as sometimes applied by the Program Compatibility Assistant, will no longer be emulated by default [#858](https://github.com/sandboxie-plus/Sandboxie/issues/858) -- use 'ApplyElevateCreateProcessFix=y' or 'ApplyElevateCreateProcessFix=program.exe,y' to enable it - trace log gets disabled only when it has no entries and the logging is stopped ### Fixed -- fixed APC issue with the new global hook emulation mechanism and WoW64 processes #780 #779 +- fixed APC issue with the new global hook emulation mechanism and WoW64 processes [#780](https://github.com/sandboxie-plus/Sandboxie/issues/780) [#779](https://github.com/sandboxie-plus/Sandboxie/issues/779) - fixed IPv6 issues with BlockPort options -- fixed an issue with CheatEngine when "OpenWinClass=*" was specified #786 -- fixed memory corruption in SbieDrv #838 -- fixed crash issue with process elevation on CreateProcess calls #858 -- fixed process elevation when running in the built-in administrator account #3 -- fixed template preview resetting unsaved entries in box options window #621 +- fixed an issue with CheatEngine when "OpenWinClass=*" was specified [#786](https://github.com/sandboxie-plus/Sandboxie/issues/786) +- fixed memory corruption in SbieDrv [#838](https://github.com/sandboxie-plus/Sandboxie/issues/838) +- fixed crash issue with process elevation on CreateProcess calls [#858](https://github.com/sandboxie-plus/Sandboxie/issues/858) +- fixed process elevation when running in the built-in administrator account [#3](https://github.com/sandboxie-plus/Sandboxie/issues/3) +- fixed template preview resetting unsaved entries in box options window [#621](https://github.com/sandboxie-plus/Sandboxie/issues/621) ## [0.7.5 / 5.49.8] - 2021-06-05 ### Added -- clipboard access for a sandbox can now be disabled with "OpenClipboard=n" #794 +- clipboard access for a sandbox can now be disabled with "OpenClipboard=n" [#794](https://github.com/sandboxie-plus/Sandboxie/issues/794) ### Changed -- now the OpenBluetooth template is enabled by default for compatibility with Unity games #799 +- now the OpenBluetooth template is enabled by default for compatibility with Unity games [#799](https://github.com/sandboxie-plus/Sandboxie/issues/799) - "PreferExternalManifest=program.exe,y" can now be set on a per-process basis ### Fixed - fixed compiler issues with the most recent VS2019 update -- fixed issue with Vivaldi browser #821 -- fixed some issues with box options in the Plus UI #879 -- fixed some issues with hardware acceleration in Chromium based browsers #795 +- fixed issue with Vivaldi browser [#821](https://github.com/sandboxie-plus/Sandboxie/issues/821) +- fixed some issues with box options in the Plus UI [#879](https://github.com/sandboxie-plus/Sandboxie/issues/879) +- fixed some issues with hardware acceleration in Chromium based browsers [#795](https://github.com/sandboxie-plus/Sandboxie/issues/795) - the "Stop All" command now issues "kmdutill scandll" first to solve issues when the SbieDll.dll is in use -- workaround for Electron apps, by forcing an additional command line argument on the GPU renderer process #547 #310 #215 - +- workaround for Electron apps, by forcing an additional command line argument on the GPU renderer process [#547](https://github.com/sandboxie-plus/Sandboxie/issues/547) [#310](https://github.com/sandboxie-plus/Sandboxie/issues/310) [#215](https://github.com/sandboxie-plus/Sandboxie/issues/215) +- fixed issue with Software Compatibility tab that doesn't always show template names correctly [#774](https://github.com/sandboxie-plus/Sandboxie/issues/774) ## [0.7.4 / 5.49.7] - 2021-04-11 ### Added -- added option to disable file migration prompt in the Plus UI +- added option to disable file migration prompt in the Plus UI with PromptForFileMigration=n [#643](https://github.com/sandboxie-plus/Sandboxie/issues/643) - added UI options for various security isolation features - added missing functionality to set template values in the Plus UI +- added templates for Popcorn-Time, Clementine Music Player, Strawberry Music Player, 32-bit MPC-HC (by Dyras) [#726](https://github.com/sandboxie-plus/Sandboxie/pull/726) [#737](https://github.com/sandboxie-plus/Sandboxie/pull/737) ### Changed -- align default settings of AutoRecover and Favourites to the Plus version (thanks isaak654) +- align default settings of AutoRecover and Favourites to the Plus version (thanks isaak654) [#747](https://github.com/sandboxie-plus/Sandboxie/pull/747) - list of email clients and browsers is now centralized in Dll_GetImageType +- localstore.rdf reference in Templates.ini was replaced with xulstore.json (by isaak654) [#751](https://github.com/sandboxie-plus/Sandboxie/pull/751) ### Fixed - fixed minor issue with logging internet blocks -- fixed issue with file recovery when located on a network share #711 -- fixed UI issue with CallTrace -- fixed sandbox shortcuts receiving double extension upon creation -- fixed misplaced labels in the classic ui (thanks isaak654) -- fixed separator line in SbieCtrl (thanks isaak654) - +- fixed issue with file recovery when located on a network share [#711](https://github.com/sandboxie-plus/Sandboxie/issues/711) +- fixed UI issue with CallTrace [#769](https://github.com/sandboxie-plus/Sandboxie/issues/769) +- fixed sandbox shortcuts receiving double extension upon creation [#770](https://github.com/sandboxie-plus/Sandboxie/issues/770) +- fixed misplaced labels in the Classic UI (thanks isaak654) [#759](https://github.com/sandboxie-plus/Sandboxie/pull/759) +- fixed separator line in SbieCtrl (thanks isaak654) [#761](https://github.com/sandboxie-plus/Sandboxie/pull/761) +- fixed broken paths in The Bat! template (by isaak654) [#756](https://github.com/sandboxie-plus/Sandboxie/pull/756) +- fixed issue about media players that attempt to write unneeded media files inside the box (by Dyras) [#743](https://github.com/sandboxie-plus/Sandboxie/pull/743) [#536](https://github.com/sandboxie-plus/Sandboxie/issues/536) ## [0.7.3 / 5.49.5] - 2021-03-27 ### Added -- added "UseSbieWndStation=y" to emulate CreateDesktop for selected processes, not only Firefox and Chrome #635 -- added option to drop the console host process integrity, now you can use "DropConHostIntegrity=y" +- added "UseSbieWndStation=y" to emulate CreateDesktop for selected processes, not only Firefox and Chrome [#635](https://github.com/sandboxie-plus/Sandboxie/issues/635) +- added option to drop the console host process integrity, now you can use "DropConHostIntegrity=y" [#678](https://github.com/sandboxie-plus/Sandboxie/issues/678) - added option to easily add local templates +- added new torrent clients and media players templates (by Dyras) [#719](https://github.com/sandboxie-plus/Sandboxie/pull/719) ### Changed -- reworked window hooking mechanism to improve performance #697 #519 #662 #69 #109 #193 +- reworked window hooking mechanism to improve performance [#697](https://github.com/sandboxie-plus/Sandboxie/issues/697) [#519](https://github.com/sandboxie-plus/Sandboxie/issues/519) [#662](https://github.com/sandboxie-plus/Sandboxie/issues/662) [#69](https://github.com/sandboxie-plus/Sandboxie/issues/69) [#109](https://github.com/sandboxie-plus/Sandboxie/issues/109) [#193](https://github.com/sandboxie-plus/Sandboxie/issues/193) -- resolves issues with file save dialogues taking 30+ seconds to open -- this fix greatly improves the win32 GUI performance of sandboxed processes - reworked RPC resolver to be ini-configurable @@ -115,12 +123,12 @@ This project adheres to [Semantic Versioning](http://semver.org/). - fixed process-specific hooks being applied to all processes in a given sandbox - fixed issue with messages and templates sometimes not being properly displayed in the SandMan UI - fixed issue with compatibility settings not being applied properly -- fixed auto delete issue that got introduced with 0.7.1 #637 +- fixed auto delete issue that got introduced with 0.7.1 [#637](https://github.com/sandboxie-plus/Sandboxie/issues/637) - fixed issue with NtSetInformationFile, FileDispositionInformation resulting in Opera installer failing -- fixed issue with MacType introduced in the 0.7.2 build #676 +- fixed issue with MacType introduced in the 0.7.2 build [#676](https://github.com/sandboxie-plus/Sandboxie/issues/676) - fixed global sandboxed windows hooks not working when window rename option is disabled - fixed issue with saving local templates -- fixed issue when using runas to start a process that was created outside of the Sandboxie supervision #688 +- fixed issue when using runas to start a process that was created outside of the Sandboxie supervision [#688](https://github.com/sandboxie-plus/Sandboxie/issues/688) -- since the runas facility is not accessible by default, this did not constitute a security issue -- to enable runas functionality, add "OpenIpcPath=\RPC Control\SECLOGON" to your Sandboxie.ini -- please take note that doing so may open other yet unknown issues @@ -132,13 +140,13 @@ This project adheres to [Semantic Versioning](http://semver.org/). ## [0.7.2 / 5.49.0] - 2021-03-04 ### Added -- added option to alter reported Windows version "OverrideOsBuild=7601" for Windows 7 SP1 +- added option to alter reported Windows version "OverrideOsBuild=7601" for Windows 7 SP1 [#605](https://github.com/sandboxie-plus/Sandboxie/issues/605) - the trace log can now be structured like a tree with processes as root items and threads as branches ### Changed - SandboxieCrypto now always migrates the CatRoot2 files in order to prevent locking of real files - greatly improved trace log performance -- MSI Server can now run with the "FakeAdminRights=y" and "DropAdminRights=y" options #600 +- MSI Server can now run with the "FakeAdminRights=y" and "DropAdminRights=y" options [#600](https://github.com/sandboxie-plus/Sandboxie/issues/600) -- special service allowance for the MSI Server can be disabled with "MsiInstallerExemptions=n" - changed SCM access check behaviour; non elevated users can now start services with a user token -- elevation is now only required to start services with a system token @@ -146,10 +154,10 @@ This project adheres to [Semantic Versioning](http://semver.org/). - reworked RPC mechanism to be more flexible ### Fixed -- fixed issues with some installers introduced in 5.48.0 #595 -- fixed "add user to sandbox" in the Plus UI #597 +- fixed issues with some installers introduced in 5.48.0 [#595](https://github.com/sandboxie-plus/Sandboxie/issues/595) +- fixed "add user to sandbox" in the Plus UI [#597](https://github.com/sandboxie-plus/Sandboxie/issues/597) - FIXED SECURITY ISSUE: the HostInjectDll mechanism allowed for local privilege escalation (thanks hg421) -- Classic UI no longer allows to create a sandbox with an invalid or reserved device name #649 +- Classic UI no longer allows to create a sandbox with an invalid or reserved device name [#649](https://github.com/sandboxie-plus/Sandboxie/issues/649) @@ -175,9 +183,9 @@ This project adheres to [Semantic Versioning](http://semver.org/). ### Fixed - fixed issues with webcam access when the DevCMApi filtering is in place -- fixed issue with free download manager for 'AppXDeploymentClient.dll', so RpcMgmtSetComTimeout=y will be used by default for this one #573 +- fixed issue with free download manager for 'AppXDeploymentClient.dll', so RpcMgmtSetComTimeout=y will be used by default for this one [#573](https://github.com/sandboxie-plus/Sandboxie/issues/573) - fixed not all WinRM files were blocked by the driver, with "BlockWinRM=n" this file block can be disabled - +- fixed Sandboxie Classic crash when saving any option in Sandbox Settings -> Appearance (by typpos) [#586](https://github.com/sandboxie-plus/Sandboxie/issues/586) @@ -200,10 +208,11 @@ This project adheres to [Semantic Versioning](http://semver.org/). -- this protection option can be disabled by using "AllowRawDiskRead=y" - fixed crash issue around SetCurrentProcessExplicitAppUserModelID observed with GoogleUpdate.exe - fixed issue with Resource Monitor sort by timestamp -- FIXED SECURITY ISSUE: a race condition in the driver allowed to obtain an elevated rights handle to a process (thanks typpos) -- FIXED SECURITY ISSUE: "\RPC Control\samss lpc" is now filtered by the driver (thanks hg421) #553 +- fixed invalid Opera bookmarks path (by isaak654) [#542](https://github.com/sandboxie-plus/Sandboxie/pull/542) +- FIXED SECURITY ISSUE: a race condition in the driver allowed to obtain an elevated rights handle to a process (thanks typpos) [#549](https://github.com/sandboxie-plus/Sandboxie/pull/549) +- FIXED SECURITY ISSUE: "\RPC Control\samss lpc" is now filtered by the driver (thanks hg421) [#553](https://github.com/sandboxie-plus/Sandboxie/issues/553) -- this allowed elevated processes to change passwords, delete users and alike; to disable filtering use "OpenSamEndpoint=y" -- FIXED SECURITY ISSUE: "\Device\DeviceApi\CMApi" is now filtered by the driver (thanks hg421) #552 +- FIXED SECURITY ISSUE: "\Device\DeviceApi\CMApi" is now filtered by the driver (thanks hg421) [#552](https://github.com/sandboxie-plus/Sandboxie/issues/552) -- this allowed elevated processes to change hardware configuration; to disable filtering use "OpenDevCMApi=y" @@ -217,16 +226,16 @@ This project adheres to [Semantic Versioning](http://semver.org/). - fixed Brave.exe now being properly recognized as Chrome-, not Firefox-based - fixed issue introduced in 0.6.5 with recent Edge builds -- the 0.6.5 behaviour can be set on a per-process basis using "RpcMgmtSetComTimeout=POPPeeper.exe,n" -- fixed grouping issues #445 -- fixed main window restore state from tray #288 +- fixed grouping issues [#445](https://github.com/sandboxie-plus/Sandboxie/issues/445) +- fixed main window restore state from tray [#288](https://github.com/sandboxie-plus/Sandboxie/issues/288) ## [0.6.5 / 5.47.0] - 2021-01-31 ### Added -- added detection for Waterfox.exe, Palemoon.exe and Basilisk.exe Firefox forks as well as Brave.exe #468 -- added Bluetooth API support, IPC port can be opened with "OpenBluetooth=y" #319 +- added detection for Waterfox.exe, Palemoon.exe and Basilisk.exe Firefox forks as well as Brave.exe [#468](https://github.com/sandboxie-plus/Sandboxie/issues/468) +- added Bluetooth API support, IPC port can be opened with "OpenBluetooth=y" [#319](https://github.com/sandboxie-plus/Sandboxie/issues/319) -- this should resolve issues with many Unity games hanging on startup for a long time - added enhanced RPC/IPC interface tracing - when DefaultBox is not found by the SandMan UI, it will be recreated @@ -234,19 +243,19 @@ This project adheres to [Semantic Versioning](http://semver.org/). ### Changed - reduced SandMan CPU usage -- Sandboxie.ini and Templates.ini can now be UTF8 encoded #461 #197 +- Sandboxie.ini and Templates.ini can now be UTF8 encoded [#461](https://github.com/sandboxie-plus/Sandboxie/issues/461) [#197](https://github.com/sandboxie-plus/Sandboxie/issues/197) -- this feature is experimental, files without a UTF-8 Signature should be recognized also -- "ByteOrderMark=yes" is obsolete, Sandboxie.ini is now always saved with a BOM/Signature - legacy language files can now be UTF8 encoded -- reworked file migration behaviour, removed hardcoded lists in favour of templates #441 +- reworked file migration behaviour, removed hardcoded lists in favour of templates [#441](https://github.com/sandboxie-plus/Sandboxie/issues/441) -- you can now use "CopyAlways=", "DontCopy=" and "CopyEmpty=" that support the same syntax as "OpenFilePath=" -- "CopyBlockDenyWrite=program.exe,y" makes a write open call to a file that won't be copied fail instead of turning it read-only - removed hardcoded SkipHook list in favour of templates ### Fixed -- fixed old memory pool leak in the Sbie driver #444 +- fixed old memory pool leak in the Sbie driver [#444](https://github.com/sandboxie-plus/Sandboxie/issues/444) - fixed issue with item selection in the access restrictions UI -- fixed updater crash in Sbiectrl.exe +- fixed updater crash in Sbiectrl.exe [#450](https://github.com/sandboxie-plus/Sandboxie/issues/450) - fixed issues with RPC calls introduced in Sbie 5.33.1 - fixed recently broken 'terminate all' command - fixed a couple minor UI issues with SandMan UI @@ -259,21 +268,21 @@ This project adheres to [Semantic Versioning](http://semver.org/). ### Added - added confirmation prompts to terminate all commands -- added window title to boxed process info #360 -- added WinSpy based sandboxed window finder #351 +- added window title to boxed process info [#360](https://github.com/sandboxie-plus/Sandboxie/issues/360) +- added WinSpy based sandboxed window finder [#351](https://github.com/sandboxie-plus/Sandboxie/issues/351) - added option to view disabled boxes and double click on box to enable it ### Changed -- "Reset Columns" now resizes them to fit the content, and it can now be localized #426 -- modal windows are now centered to the parent #417 -- improved new box window #417 +- "Reset Columns" now resizes them to fit the content, and it can now be localized [#426](https://github.com/sandboxie-plus/Sandboxie/issues/426) +- modal windows are now centered to the parent [#417](https://github.com/sandboxie-plus/Sandboxie/issues/417) +- improved new box window [#417](https://github.com/sandboxie-plus/Sandboxie/issues/417) ### Fixed -- fixed issues with window modality #409 -- fixed issues when main window was set to be always on top #417 +- fixed issues with window modality [#409](https://github.com/sandboxie-plus/Sandboxie/issues/409) +- fixed issues when main window was set to be always on top [#417](https://github.com/sandboxie-plus/Sandboxie/issues/417) - fixed a driver issue with Windows 10 insider build 21286 -- fixed issues with snapshot dialog #416 -- fixed an issue when writing to a path that already exists in the snapshot but not outside +- fixed issues with snapshot dialog [#416](https://github.com/sandboxie-plus/Sandboxie/issues/416) +- fixed an issue when writing to a path that already exists in the snapshot but not outside [#415](https://github.com/sandboxie-plus/Sandboxie/issues/415) @@ -281,34 +290,35 @@ This project adheres to [Semantic Versioning](http://semver.org/). ### Added - added "SandboxService=..." to force selected services to be started in the sandbox -- added template clean-up functionality to plus UI +- added template clean-up functionality to Plus UI - added internet prompt to now also allow internet access permanently -- added browse button for box root folder in the SandMan UI #382 -- added explorer info message #352 +- added browse button for box root folder in the SandMan UI [#382](https://github.com/sandboxie-plus/Sandboxie/issues/382) +- added explorer info message [#352](https://github.com/sandboxie-plus/Sandboxie/issues/352) - added option to keep the SandMan UI always on top -- allow drag and drop file onto Sandman.exe to run it sandboxed #355 -- added start SandMan UI when a sandboxed application starts #367 +- allow drag and drop file onto Sandman.exe to run it sandboxed [#355](https://github.com/sandboxie-plus/Sandboxie/issues/355) +- added start SandMan UI when a sandboxed application starts [#367](https://github.com/sandboxie-plus/Sandboxie/issues/367) - recovery window can now list all files - added file counter to recovery window - when "NoAddProcessToJob=y" is specified, Chrome and related browsers now can fully use the job system -- Note: "NoAddProcessToJob=y" reduces the box isolation, but the affected functions are mostly covered by UIPI anyway - added optimized default column widths to Sbie view +- added template support for Yandex and Ungoogled Chromium browsers (by isaak654) ### Changed -- updated templates (thanks isaak654) -- when trying to take a snapshot of an empty sandbox a proper error message is displayed #381 +- updated templates with multiple browsers fixes (thanks isaak654) +- when trying to take a snapshot of an empty sandbox a proper error message is displayed [#381](https://github.com/sandboxie-plus/Sandboxie/issues/381) - new layout for the recovery window - Sbie view sorting is now case insensitive ### Fixed -- fixed issue child window closing terminating application when main was hidden -- fixed issues with non modal windows +- fixed issue child window closing terminating application when main was hidden [#349](https://github.com/sandboxie-plus/Sandboxie/issues/349) +- fixed issues with non modal windows [#349](https://github.com/sandboxie-plus/Sandboxie/issues/349) - fixed issues connecting to driver in portable mode - fixed minor issues with snapshot window -- fixed missing error message when attempting to create an already existing sandbox -- fixed issue allowing to save setting when a sandbox was already deleted -- fixed issues with disabled items in dark mode -- fixed some dialogues not closing when pressing Esc +- fixed missing error message when attempting to create an already existing sandbox [#359](https://github.com/sandboxie-plus/Sandboxie/issues/359) +- fixed issue allowing to save setting when a sandbox was already deleted [#359](https://github.com/sandboxie-plus/Sandboxie/issues/359) +- fixed issues with disabled items in dark mode [#359](https://github.com/sandboxie-plus/Sandboxie/issues/359) +- fixed some dialogues not closing when pressing Esc [#359](https://github.com/sandboxie-plus/Sandboxie/issues/359) - fixed tab stops on many windows @@ -372,7 +382,7 @@ This project adheres to [Semantic Versioning](http://semver.org/). -- the filter can be disabled with "OpenPrintSpooler=y" - added overwrite prompt when recovering an already existing file - added "StartProgram=", "StartService=" and "AutoExec=" options to the SandMan UI -- added more compatibility templates (thanks isaak654) +- added more compatibility templates (thanks isaak654) [#294](https://github.com/sandboxie-plus/Sandboxie/pull/294) ### Changed - Changed Emulated SCM behaviour, boxed services are no longer by default started as boxed system @@ -389,11 +399,11 @@ This project adheres to [Semantic Versioning](http://semver.org/). - fixed issue with IPC tracing - FIXED SECURITY ISSUE: CVE-2019-13502 "\RPC Control\LSARPC_ENDPOINT" is now filtered by the driver (thanks Diversenok) -- this allowed some system options to be changed, to disable filtering use "OpenLsaEndpoint=y" -- fixed hooking issues SBIE2303 with Chrome, Edge and possibly others #68 #166 +- fixed hooking issues SBIE2303 with Chrome, Edge and possibly others [#68](https://github.com/sandboxie-plus/Sandboxie/issues/68) [#166](https://github.com/sandboxie-plus/Sandboxie/issues/166) - fixed failed check for running processes when performing snapshot operations - fixed some box option checkboxes were not properly initialized - fixed unavailable options are not properly disabled when SandMan is not connected to the driver -- fixed MSI installer issue, not being able to create "C:\Config.msi" folder on Windows 20H2 #219 +- fixed MSI installer issue, not being able to create "C:\Config.msi" folder on Windows 20H2 [#219](https://github.com/sandboxie-plus/Sandboxie/issues/219) - added missing localization to generic list commands - fixed issue with "iconcache_*" when running sandboxed explorer - fixed more issues with groups @@ -408,7 +418,7 @@ This project adheres to [Semantic Versioning](http://semver.org/). - added command line column to the process view in the SandMan UI ### Fixed -- fixed a few issues with group handling #262 +- fixed a few issues with group handling [#262](https://github.com/sandboxie-plus/Sandboxie/issues/262) - fixed issue with GetRawInputDeviceInfo when running a 32 bit program on a 64 bit system - fixed issue when pressing apply in the "Resource Access" tab; the last edited value was not always applied - fixed issue merging entries in Resource Access Monitor @@ -418,7 +428,7 @@ This project adheres to [Semantic Versioning](http://semver.org/). ## [0.5.3a / 5.45.2] - 2020-12-29 ### Added -- added prompt to choose if links in the SandMan UI should be opened in a sandboxed or unsandboxed browser #273 +- added prompt to choose if links in the SandMan UI should be opened in a sandboxed or unsandboxed browser [#273](https://github.com/sandboxie-plus/Sandboxie/issues/273) - added more recovery options - added "ClosedClsid=" to block COM objects from being used when they cause compatibility issues - added "ClsidTrace=*" option to trace COM usage @@ -439,11 +449,11 @@ This project adheres to [Semantic Versioning](http://semver.org/). - by default, when started in portable mode, the sandbox folder will be located in the parent directory of the Sandboxie instance ### Fixed -- grouping menu not fully working in the new SandMan UI #277 +- grouping menu not fully working in the new SandMan UI [#277](https://github.com/sandboxie-plus/Sandboxie/issues/277) - fixed not being able to set quick recovery in SandMan UI - fixed resource leak when loading process icons in SandMan UI - fixed issue with OpenToken debug options -- fixed Chrome crashing on websites that cause the invocation of "FindAppUriHandlersAsync" #198 +- fixed Chrome crashing on websites that cause the invocation of "FindAppUriHandlersAsync" [#198](https://github.com/sandboxie-plus/Sandboxie/issues/198) - fixed issue connecting to the driver when starting in portable mode - fixed missing template setup when creating new boxes @@ -457,7 +467,7 @@ This project adheres to [Semantic Versioning](http://semver.org/). ### Fixed - fixed translation support in the SandMan UI -- fixed sandboxed explorer issue #289 +- fixed sandboxed explorer issue [#289](https://github.com/sandboxie-plus/Sandboxie/issues/289) - fixed simplified Chinese localization @@ -475,30 +485,30 @@ This project adheres to [Semantic Versioning](http://semver.org/). ### Changed - reorganized the advanced box options a bit -- changed icons (thanks Valinwolf for picking the new ones) #235 -- updated Template.ini (thanks isaak654) +- changed icons (thanks Valinwolf for picking the new ones) [#235](https://github.com/sandboxie-plus/Sandboxie/issues/235) +- updated Templates.ini (thanks isaak654) [#256](https://github.com/sandboxie-plus/Sandboxie/pull/256) [#258](https://github.com/sandboxie-plus/Sandboxie/pull/258) - increased max value for disable forced process time in SandMan UI ### Fixed -- fixed BSOD introduced in 5.45.0 when using Windows 10 "core isolation" #221 +- fixed BSOD introduced in 5.45.0 when using Windows 10 "core isolation" [#221](https://github.com/sandboxie-plus/Sandboxie/issues/221) - fixed minor issue with lingering/leader processes - fixed menu issue in SandMan UI - fixed issue with stop behaviour page in SandMan UI - fixed issue with Plus installer not displaying kmdutil window - fixed SandMan UI saving UI settings on Windows shutdown -- fixed issue with Plus installer autorun #247 +- fixed issue with Plus installer autorun [#247](https://github.com/sandboxie-plus/Sandboxie/issues/247) - fixed issue with legacy installer not removing all files -- fixed a driver compatibility issue with Windows 20H1 and later #228 +- fixed a driver compatibility issue with Windows 20H1 and later [#228](https://github.com/sandboxie-plus/Sandboxie/issues/228) -- this solves "stop pending", LINE messenger hanging and other issues... -- fixed quick recovery issue in SbieCtrl.exe introduced in 5.45.0 #224 +- fixed quick recovery issue in SbieCtrl.exe introduced in 5.45.0 [#224](https://github.com/sandboxie-plus/Sandboxie/issues/224) - fixed issue advanced hide process settings not saving -- fixed some typos in the UI (thanks isaak654) -- fixed issue with GetRawInputDeviceInfo failing when boxed processes are put in a job object #176 #233 +- fixed some typos in the UI (thanks isaak654) [#252](https://github.com/sandboxie-plus/Sandboxie/pull/252) [#253](https://github.com/sandboxie-plus/Sandboxie/pull/253) [#254](https://github.com/sandboxie-plus/Sandboxie/pull/254) +- fixed issue with GetRawInputDeviceInfo failing when boxed processes are put in a job object [#176](https://github.com/sandboxie-plus/Sandboxie/issues/176) [#233](https://github.com/sandboxie-plus/Sandboxie/issues/233) -- this fix resolves issues with CP2077 and other games not getting keyboard input (thanks Rostok) - fixed failing ClipCursor won't longer span the message log - fixed issue with adding recovery folders in SandMan UI - fixed issue with Office 2019 template when using a non-default Sbie install location -- fixed issue setting last access attribute on sandboxed folders #218 +- fixed issue setting last access attribute on sandboxed folders [#218](https://github.com/sandboxie-plus/Sandboxie/issues/218) - fixed issue with process start signal @@ -527,12 +537,12 @@ This project adheres to [Semantic Versioning](http://semver.org/). - added user interactive control mechanism when using the new SandMan UI -- when a file exceeds the copy limit instead of failing, the user is prompted if the file should be copied or not -- when internet access is blocked it now can be exempted in real time by the user -- added missing file recovery and auto/quick recovery functionality #188 #178 +- added missing file recovery and auto/quick recovery functionality [#188](https://github.com/sandboxie-plus/Sandboxie/issues/188) [#178](https://github.com/sandboxie-plus/Sandboxie/issues/178) - added silent MSG_1399 boxed process start notification to keep track of short lived boxed processes - added ability to prevent system wide process starts, Sandboxie can now instead of just alerting also block processed on the alert list -- set "StartRunAlertDenied=y" to enable process blocking - the process start alert/block mechanism can now also handle folders use "AlertFolder=..." -- added ability to merge snapshots #151 +- added ability to merge snapshots [#151](https://github.com/sandboxie-plus/Sandboxie/issues/151) - added icons to the sandbox context menu in the new UI - added more advanced options to the sandbox options window - added file migration progress indicator @@ -548,7 +558,7 @@ This project adheres to [Semantic Versioning](http://semver.org/). - added check for updates to the legacy SbieCtrl UI ### Changed -- File migration limit can now be disabled by specifying "CopyLimitKb=-1" #526 +- File migration limit can now be disabled by specifying "CopyLimitKb=-1" [#526](https://github.com/sandboxie-plus/Sandboxie/issues/526) - improved and refactored message logging mechanism, reducing memory usage by factor of 2 - terminated boxed processes are now kept listed for a couple of seconds - reworked sandbox deletion mechanism of the new UI @@ -581,7 +591,7 @@ This project adheres to [Semantic Versioning](http://semver.org/). - added option to view template presets for any given box - added text filter to template view - added new compatibility templates: --- Windows 10 core UI component: OpenIpcPath=\BaseNamedObjects\[CoreUI]-* solving issues with Chinese Input and Emojis #120 #88 +-- Windows 10 core UI component: OpenIpcPath=\BaseNamedObjects\[CoreUI]-* solving issues with Chinese Input and Emojis [#120](https://github.com/sandboxie-plus/Sandboxie/issues/120) [#88](https://github.com/sandboxie-plus/Sandboxie/issues/88) -- Firefox Quantum, access to Windows’ FontCachePort for compatibility with Windows 7 - added experimental debug option "OriginalToken=y" which lets sandboxed processes retain their original unrestricted token -- This option is comparable with "OpenToken=y" and is intended only for testing and debugging, it BREAKS most SECURITY guarantees (!) @@ -632,11 +642,11 @@ This project adheres to [Semantic Versioning](http://semver.org/). - added disable forced programs menu command to the SandMan UI ### Fixed -- fixed file rename bug introduced with an earlier Driver Verifier fix #174 #153 +- fixed file rename bug introduced with an earlier Driver Verifier fix [#174](https://github.com/sandboxie-plus/Sandboxie/issues/174) [#153](https://github.com/sandboxie-plus/Sandboxie/issues/153) - fixed issue saving access lists - fixed issue with program groups parsing in the SandMan UI -- fixed issue with internet access restriction options #177 #185 -- fixed issue deleting sandbox when located on a drive directly #139 +- fixed issue with internet access restriction options [#177](https://github.com/sandboxie-plus/Sandboxie/issues/177) [#185](https://github.com/sandboxie-plus/Sandboxie/issues/185) +- fixed issue deleting sandbox when located on a drive directly [#139](https://github.com/sandboxie-plus/Sandboxie/issues/139) ## [0.4.2 / 5.43.6] - 2020-10-10 @@ -645,9 +655,9 @@ This project adheres to [Semantic Versioning](http://semver.org/). - added explore box content menu option ### Fixed -- fixed thread handle leak in SbieSvc and other components #144 +- fixed thread handle leak in SbieSvc and other components [#144](https://github.com/sandboxie-plus/Sandboxie/issues/144) - msedge.exe is now categorized as a Chromium derivate -- fixed Chrome 86+ compatibility bug with Chrome's own sandbox +- fixed Chrome 86+ compatibility bug with Chrome's own sandbox [#149](https://github.com/sandboxie-plus/Sandboxie/issues/149) ## [0.4.1 / 5.43.5] - 2020-09-12 @@ -658,8 +668,8 @@ This project adheres to [Semantic Versioning](http://semver.org/). ### Changed - SbieCtrl does not longer auto show the tutorial on first start -- when hooking, the to the trampoline migrated section of the original function is no longer noped out --- it caused issues with unity games, will be investigated and re enabled later +- when hooking to the trampoline, the migrated section of the original function is no longer noped out +-- it caused issues with unity games, will be investigated and re-enabled later ### Fixed - fixed colour issue with vertical tabs in dark mode @@ -680,7 +690,7 @@ This project adheres to [Semantic Versioning](http://semver.org/). -- each snapshot gets a full copy of the box registry for now -- each snapshot can have multiple children snapshots - added access status to Resource Monitor -- added setting to change border width +- added setting to change border width [#113](https://github.com/sandboxie-plus/Sandboxie/issues/113) - added snapshot manager UI to SandMan - added template to enable authentication with an Yubikey or comparable 2FA device - added UI for program alert @@ -757,7 +767,7 @@ This project adheres to [Semantic Versioning](http://semver.org/). - FIXED SECURITY ISSUE: fixed missing SCM access check for sandboxed services (thanks Diversenok) -- Note: to disable the access check use "UnrestrictedSCM=y" (debug option) - fixed missing initialization in service server that caused sandboxed programs to crash when querying service status -- fixed many bugs that caused the SbieDrv.sys to BSOD when run with MSFT Driver Verifier active +- fixed many bugs that caused the SbieDrv.sys to BSOD when running with Driver Verifier enabled [#57](https://github.com/sandboxie-plus/Sandboxie/issues/57) -- 0xF6 in GetThreadTokenOwnerPid and File_Api_Rename -- missing non optional parameter for FltGetFileNameInformation in File_PreOperation -- 0xE3 in Key_StoreValue and Key_PreDataInject @@ -785,7 +795,7 @@ This project adheres to [Semantic Versioning](http://semver.org/). -- Red LogAPI/BSA enabled -- more to come :D - added progress window for async operations that take time -- added DPI awareness +- added DPI awareness [#56](https://github.com/sandboxie-plus/Sandboxie/issues/56) - the driver file is now obfuscated to avoid false positives - additional debug options to Sandboxie.ini OpenToken=y that combines UnrestrictedToken=y and UnfilteredToken=y -- Note: using these options weakens the sandboxing, they are intended for debugging and may be used for better application virtualization later