Can Browser History Escape The Sandbox?

If it's not about a problem in the program
Post Reply
gizmo77
Posts: 107
Joined: Wed Sep 03, 2014 11:48 am

Can Browser History Escape The Sandbox?

Post by gizmo77 » Sun Apr 10, 2016 11:07 am

[WIN7-64bit / SBIE 5.10 / OPERA 38]

I recently changed default search from Google to Bing. For my purpose the page presentation is more appealing and my searches are pretty 'basic'. Of course, to do that I had to 'Disable Forced Programs' and open '38 outside the 'Box. Change search default, close browser...re-open, sandboxed, and go on my way.

Yesterday I was snooping around, burning keyboard commands in my 'maturing' noggin. I have two weather URLs that come up when I open the browser, so when I hit Control+H {history}, I expected to see the two URLs shown. They were, but ALSO was an arm load of URLs relating to Dogs, My Dog, Dog Food, etc. WOW! As I understand SBIE/Browser interworking, I think that meant my browsing history in Bing had somehow been given Direct Access, which I ONLY give to BOOK MARKS. I went thru the change search engine drill, back to Google. Open bunch of URLs, close browser; open browser sandboxed...no history [normal]. Went back to Bing, same drill, same 'good' result.

A scan of the 'puter with MSSS showed I didn't pick up any bugs. I am a fanatic about 'going on line' **IN** the sandbox only, but I guess I could have accidentally gone on to do my search after changing to Bing, and still being in 'Disable Forced Programs'. But...

So...is there any way 'Browsing History' *CAN* leave the sandbox and go home to the C: Drive...on it's own?

I hope this was my error, as it would be the very first time anything has ever gotten out of my Sandbox without being invited....NOT BLOODY GOOD.

???

Giz

bo.elam
Sandboxie Guru
Sandboxie Guru
Posts: 2809
Joined: Wed Apr 22, 2009 9:17 pm

Re: Can Browser History Escape The Sandbox?

Post by bo.elam » Sun Apr 10, 2016 12:41 pm

Gizmo, I am not familiar with Opera. Bur what I am going to tell you should help you figure this out. I use Firefox. Firefox saves bookmarks and history in the same file. So, when we allow access to our bookmarks, history gets saved as well. Then to get rid of history, I set it up that way in Firefox Options were I set Firefox history to be deleted when closing the browser.

You should be able to do something similar with Opera. See what you are allowing access to in Applications>Web browser. Try to find out or figure out the file or files were history and bookmarks are saved by Opera. Knowing this kind of information will help you figure what to do.

Bo

gizmo77
Posts: 107
Joined: Wed Sep 03, 2014 11:48 am

Re: Can Browser History Escape The Sandbox?

Post by gizmo77 » Sun Apr 10, 2016 1:17 pm

Hi again, Bo... and thanks for the info; all understood.

Applications>Web Browser doesn't work for the newer [later than version 12] versions of Opera, so have used Resource Access---Direct Access, for the three book mark FILES in App Data, Roaming, Opera...etc. Works great for all my BM use. History is three different files in that same App Data folder.

Yes, I can manually go to delete browsing history any time, but it appears my only choice for same thing automatically is to remove 'Local Data' when closing the browser; but there goes my few {but well used] cookies.

Looking more and more like I just goofed up, Bo... Opera 38 has a built-in ad blocker and it seems a lot of Evil-Ware comes along in ads, so maybe that's how I [probably] was browsing outside the sandbox and survived!

Have to be more careful in the future :D . By the way, I have tried using F/F and Chrome, but neither has the features I use in Opera...at least that I found...

Thanks, again

Giz

Craig@Invincea
Sandboxie Support
Sandboxie Support
Posts: 3523
Joined: Thu Jun 18, 2015 3:00 pm
Location: DC Metro Area
Contact:

Re: Can Browser History Escape The Sandbox?

Post by Craig@Invincea » Fri Apr 15, 2016 11:44 am

gizmo77 wrote:Hi again, Bo... and thanks for the info; all understood.

Applications>Web Browser doesn't work for the newer [later than version 12] versions of Opera, so have used Resource Access---Direct Access, for the three book mark FILES in App Data, Roaming, Opera...etc. Works great for all my BM use. History is three different files in that same App Data folder.

Yes, I can manually go to delete browsing history any time, but it appears my only choice for same thing automatically is to remove 'Local Data' when closing the browser; but there goes my few {but well used] cookies.

Looking more and more like I just goofed up, Bo... Opera 38 has a built-in ad blocker and it seems a lot of Evil-Ware comes along in ads, so maybe that's how I [probably] was browsing outside the sandbox and survived!

Have to be more careful in the future :D . By the way, I have tried using F/F and Chrome, but neither has the features I use in Opera...at least that I found...

Thanks, again

Giz
Hmmm, I'll poke around into this to see if the Template can be adjusted?

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest