In this release, several significant updates and fixes have been introduced to enhance the functionality and performance of sandboxed processes.
A new option has been added to limit the memory of sandboxed processes and the number of processes in a single sandbox through job objects, thanks to the contribution of Yeyixiao. This can be configured using "TotalMemoryLimit" to limit the whole sandbox and "ProcessMemoryLimit" to limit individual processes.
A command line option, /fcp /force_children, has been added to start.exe, enabling the initiation of a program unsandboxed while having all its children processes sandboxed. Additionally, the ability to force sandboxed processes to use a predefined SOCKS5 proxy has been introduced. There is now also the capability to intercept DNS queries for logging and/or redirection. Support for SOCKS5 proxy authentication based on RFC1928 has been added, thanks to Deezzir, who also contributed a Test Dialog UI for the SOCKS5 proxy.
Please note that the Proxy and DNS features require an advances type certificate.
Compatibility with Windows build 26217 has been validated, and dynamic data has been updated accordingly. Lastly, an issue with an early batch of Large Supporter certificates has been resolved, ensuring smoother operation and fewer disruptions.
For a full list of changes and fixes please review the full change log.
You can support the project through donations, any help will be greatly appreciated.