Sandbox Your Fox

Less Privileged AppContainer (LPAC) Sandbox for Firefox

Pure AppContainer Isolation | No AppSilo | Faster Firefox | Secure Firefox | Portable Firefox

* Yes, that is Process Explorer running in an AppContainer as well, showing only AppContainer processes.

Summary:

This runs as a portable version of Firefox within an AppContainer (LPAC) with it's own profile. Therefore, you can play around with this and test it without affecting your regular Firefox installation or your regular profile.

What You Get:

Firefox running in a secure AppContainer (LPAC) sandbox
Firefox running in single process mode (E10s/Fission disabled)
Firefox running in Private Browsing Mode

What You Don't Get:

Updates fail and must be done outside of AppContainer
Regular browsing mode crashes due to Shared Web Content process
DRM components fail (no Netflix, Disney Plus, etc.)
Firefox Sync does not work
Picture-in-Picture Mode (causes Firefox to crash)

Important Setup Instructions:

Create the directory C:\AppContainer
Extract the 7z archive from Releases into the C:\AppContainer directory
Directory structure absolutely must be as follows:

C:\AppContainer
   ├───AppExec
   ├───Downloads
   └───Firefox
       ├───bin
       └───profile

There is a user.js file in the profile folder which is absolutely critical for running as AppContainer
Before first run, you must run SetACLs.bat to set the AppContainer ACLs (you only need to do this once)
Now you can run Firefox in AppContainer by running firefox.bat or the included Firefox shortcut

kartikdutt18 / SandboxYourFox