browser-support allows access to various APIs needed by modern web browsers.
Auto-connect: no when
allow-sandbox: true, yes otherwise
allow-sandbox: true|false(defaults to
This interface is intended to be used when using an embedded Chromium Content API or using the sandboxes in major browsers from vendors like Google and Mozilla. The
allow-sandbox attribute may be used to give the necessary access to use the browser’s sandbox functionality.
ⓘ A browser’s internal sandbox requires numerous privileged security policy rules to work and is typically considered trusted outside of snapd. For this reason,
--allow-sandbox=trueis limited to trusted publishers only.
For some web applications, such those using Electron, it is often useful to disable the internal sandbox and rely on strict confinement, forcing the snap to use
allow-sandbox: false. To do this, specify
--no-sandbox on the command line for your application.
--no-sandbox is used, the snap is confined regardless of the
--allow-sandbox attribute, which now only controls whether or not the browser’s internal sandbox can be used.