From cf9929f958d4417e9347adef080dce9230f97db3 Mon Sep 17 00:00:00 2001
From: DavidXanatos <3890945+DavidXanatos@users.noreply.github.com>
Date: Sat, 1 Apr 2023 22:51:44 +0200
Subject: [PATCH] Update proc.c

---
 Sandboxie/core/dll/proc.c | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/Sandboxie/core/dll/proc.c b/Sandboxie/core/dll/proc.c
index aebd9af6..b76d9a3a 100644
--- a/Sandboxie/core/dll/proc.c
+++ b/Sandboxie/core/dll/proc.c
@@ -874,18 +874,18 @@ _FX BOOL Proc_CreateProcessInternalW(
             }
         }
 
+        //
+        // hack:  recent versions of Flash Player use the Chrome sandbox
+        // architecture which conflicts with our restricted process model
+        //
+
+        if (Dll_ImageType == DLL_IMAGE_FLASH_PLAYER_SANDBOX ||
+            Dll_ImageType == DLL_IMAGE_ACROBAT_READER ||
+            Dll_ImageType == DLL_IMAGE_PLUGIN_CONTAINER)
+            hToken = NULL;
+
         if (Config_GetSettingsForImageName_bool(L"DeprecatedTokenHacks", FALSE)) // with drop container token, etc this should be obsolete
         {
-            //
-            // hack:  recent versions of Flash Player use the Chrome sandbox
-            // architecture which conflicts with our restricted process model
-            //
-
-            if (Dll_ImageType == DLL_IMAGE_FLASH_PLAYER_SANDBOX ||
-                Dll_ImageType == DLL_IMAGE_ACROBAT_READER ||
-                Dll_ImageType == DLL_IMAGE_PLUGIN_CONTAINER)
-                hToken = NULL;
-
             //
             // MSEdge Compatibility hack
             // workers of type cdm can't open SbieSvc's ALPC port