Skip to content

Commit eb5b444

Browse files
committed
address comments
1 parent dac498c commit eb5b444

File tree

1 file changed

+7
-6
lines changed

1 file changed

+7
-6
lines changed

specs/IsEnhancedSecurityModeEnabled.md

Lines changed: 7 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -9,18 +9,19 @@ In WebView2, ESM is off by default to avoid performance impact. Host application
99

1010
In Microsoft Edge, ESM offers two states:
1111

12-
- Balanced – Enabled only for unfamiliar sites based on browsing heuristics.
12+
- Balanced – Enabled only for unfamiliar sites based on browser usage patterns.
1313
- Strict – Always enabled for all sites.
1414

1515
![image](https://github.com/MicrosoftEdge/WebView2Feedback/assets/82386753/35977716-e46c-4257-82da-906b0c6f833e)
1616

17-
Unlike Edge browser, WebView2 does not support heuristic-based “Balanced” state. The Only options are available: Off or Strict.
17+
Unlike Edge browser, WebView2 does not support heuristic-based “Balanced” state. Only two options are available: Off and Strict.
1818

19-
Currently, ESM can only be configured via the --sdsm-state browser flag([see for more details](https://learn.microsoft.com/en-us/microsoft-edge/webview2/concepts/webview-features-flags?tabs=dotnetcsharp)) at environment creation, applying globally to all profiles.
20-
This proposal introduces a profile-level API to enable or disable ESM and persist the setting in the user data folder, giving developers fine-grained control without relying on global flags..
19+
Currently, ESM state can only be configured via the `--sdsm-state` browser flag([see for more details](https://learn.microsoft.com/en-us/microsoft-edge/webview2/concepts/webview-features-flags?tabs=dotnetcsharp)) at environment creation, applying globally to all profiles. There is no flexibility to modify the state at runtime.
20+
21+
This proposal introduces an API to enable or disable ESM and persist the configuration for a WebView2 profile within the user data folder.
2122

2223
## CoreWebView2Profile.IsEnhancedSecurityModeEnabled
23-
Enables or disables Enhanced Security Mode (ESM) for all WebView2 instances sharing the same profile. The setting is persisted in the user data folder. Default is false.
24+
Enables or disables Enhanced Security Mode (ESM) for all WebView2 instances sharing the same profile. This property value is persisted for a WebView2 profile in the user data folder. The default value is false.
2425

2526
- true: ESM enabled in Strict state: disables JavaScript JIT and applies additional OS protections.
2627
- false: ESM state is Off.
@@ -68,7 +69,7 @@ void EnableEnhancedSecurityMode()
6869
# API Details
6970

7071
```c#
71-
/// Extension of ICoreWebView2Profile to control Enhanced Security Mode (ESM).
72+
/// Extension of ICoreWebView2Profile to control Enhanced Security Mode (ESM) state.
7273
///
7374
/// ESM reduces the risk of memory-related vulnerabilities by disabling JavaScript
7475
/// Just-in-Time (JIT) compilation and enabling additional OS protections.

0 commit comments

Comments
 (0)