Skip to content

Commit 711b317

Browse files
committed
use level instead of state
1 parent eb5b444 commit 711b317

File tree

1 file changed

+9
-9
lines changed

1 file changed

+9
-9
lines changed

specs/IsEnhancedSecurityModeEnabled.md

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -7,24 +7,24 @@ Enhanced Security Mode (ESM) is a Microsoft Edge security feature that reduces t
77

88
In WebView2, ESM is off by default to avoid performance impact. Host applications can enable ESM for stricter security when rendering untrusted or sensitive content. While this improves security, it may reduce JavaScript performance.
99

10-
In Microsoft Edge, ESM offers two states:
10+
In Microsoft Edge, ESM offers two levels:
1111

1212
- Balanced – Enabled only for unfamiliar sites based on browser usage patterns.
1313
- Strict – Always enabled for all sites.
1414

1515
![image](https://github.com/MicrosoftEdge/WebView2Feedback/assets/82386753/35977716-e46c-4257-82da-906b0c6f833e)
1616

17-
Unlike Edge browser, WebView2 does not support heuristic-based Balanced” state. Only two options are available: Off and Strict.
17+
Unlike Edge browser, WebView2 does not support heuristic-based "Balanced" level. Only two options are available: Off and Strict.
1818

19-
Currently, ESM state can only be configured via the `--sdsm-state` browser flag([see for more details](https://learn.microsoft.com/en-us/microsoft-edge/webview2/concepts/webview-features-flags?tabs=dotnetcsharp)) at environment creation, applying globally to all profiles. There is no flexibility to modify the state at runtime.
19+
Currently, ESM level can only be configured via the `--sdsm-state` browser flag([see for more details](https://learn.microsoft.com/en-us/microsoft-edge/webview2/concepts/webview-features-flags?tabs=dotnetcsharp)) at environment creation, applying globally to all profiles. There is no flexibility to modify the level at runtime.
2020

2121
This proposal introduces an API to enable or disable ESM and persist the configuration for a WebView2 profile within the user data folder.
2222

2323
## CoreWebView2Profile.IsEnhancedSecurityModeEnabled
2424
Enables or disables Enhanced Security Mode (ESM) for all WebView2 instances sharing the same profile. This property value is persisted for a WebView2 profile in the user data folder. The default value is false.
2525

26-
- true: ESM enabled in Strict state: disables JavaScript JIT and applies additional OS protections.
27-
- false: ESM state is Off.
26+
- true: ESM enabled in Strict level: disables JavaScript JIT and applies additional OS protections.
27+
- false: ESM level is Off.
2828

2929
Changes apply to future navigations; reload may be required. Enabling ESM improves security but can reduce JavaScript performance.
3030

@@ -69,17 +69,17 @@ void EnableEnhancedSecurityMode()
6969
# API Details
7070

7171
```c#
72-
/// Extension of ICoreWebView2Profile to control Enhanced Security Mode (ESM) state.
72+
/// Extension of ICoreWebView2Profile to control Enhanced Security Mode (ESM) level.
7373
///
7474
/// ESM reduces the risk of memory-related vulnerabilities by disabling JavaScript
7575
/// Just-in-Time (JIT) compilation and enabling additional OS protections.
7676
/// This property applies to all WebView2 instances sharing the same profile and
7777
/// is persisted in the user data folder.
7878
///
79-
/// Default: false. ESM state is Off.
79+
/// Default: false. ESM level is Off.
8080
///
81-
/// true: Enables ESM in Strict state for all sites.
82-
/// false: ESM state is Off.
81+
/// true: Enables ESM in Strict level for all sites.
82+
/// false: ESM level is Off.
8383
///
8484
/// Notes:
8585
/// - Changes apply to future navigations; reload may be required.

0 commit comments

Comments
 (0)