Sandboxie full changelog

Added:
added workaround for SBIE2205 OpenDesktop when requesting default desktop
Fixed:
fixed box rename failing with "The parameter is incorrect" since 1.17.3, caused by multi-line section content being rejected by the new ContainsCRLF check in CIniFile::AddValue
fixed renamed sandbox not being re-selected in the UI after a successful rename
fixed sandboxed app tray icons not showing with OpenWinClass=* by proxying Shell_NotifyIcon; can be disabled with UseShellNotifyIconProxy (default enabled, supports process and !process selectors)
fixed track WS_EX_TOPMOST extended style, detect topmost state changes, and use appropriate HWND_TOPMOST vs HWND_TOP ordering to ensure correct border visibility and z-order when topmost status changes. #5358

Added:
added 'BlockLocalLoop=y' to block local loopback connections
added electron detection and SBIE2189 Message with a trouble shooting option to set 'SpecialImage=chrome,program.exe' for the encountered application
added automated electron app detection heuristic on by default it can be disabled with 'UseElectronDetection=n'
Changed:
Hardware info protection can now be switched per process #5271
Driver now verifies vertificates using UTC tiem instead of local time #4241 #5316
Fixed:
fixed issue with volatile configuration update
fixed, added missing WaitServiceState resolves "LINE fails to launch" / NO_SIGNATURE #5306
fix(ipc): release Ipc_Handles_CritSec on Ipc_GetName failure in NtQueryDirectoryObject #5326
fixed The user interfaces of all WebView2 applications built with Tauri are unresponsive. #5327
fixed race condition BSOD during driver unload #5329
fixed Key_MergeSubkeys logic verification #5301
fixed issue with File_WaitNamedPipe in Application Compartment mode
Removed:
removed deprecated 'UseElectronWorkaround=y' option

Added:
added configurable window location settings to control which monitor main, non-main, file recovery, and notification windows open on, including a selectable fallback mode. #4536 #5238
Global Settings > Interface Config > Window Options
added "Label only" border mode option (onlbl, ttllbl, alllbl) that hides the colored border frame and shows only the sandbox name (or alias) label #5239
added MIDI workaround template for Windows 11 #5183 #5203 (thanks xsmolasses)
added new tray customization options (Global Settings > Shell Integration > System Tray): #5254
"Show icons in tray context menu" (Options/TrayIcons) — controls whether custom sandbox icons are displayed in the tray menu.
"Show box alias name instead of box name in tray" (Options/TrayUseAlias) — displays the configured alias/display name in both compact and regular tray menus.
"Show sandbox status as tooltip in tray list" (Options/TrayStatusTip) now supports tri-state behavior: unchecked = never, partial = while Ctrl or Shift is held (default), checked = always.
"Show overlay icons for boxes in tray list" (Options/TrayOverlayIcons) — shows the same box-state overlays used in the main sandbox list (no-force, disk image mounted/unmounted, RAM disk, auto-delete) on tray icons in both the compact widget and the regular context menu.
added border capture exclusion via HideBordersFromCapture
keeps border frames and labels out of screenshots and screen recordings; defaults to CoverBoxedWindows
added border label width and taskbar clipping options
configurable via BorderColor label width and BorderExcludeTaskbar
added UseFakeShellDispatch option to provide synthetic IShellDispatch fallback (may fix some WebView2 issues)
can be disabled per process via UseFakeShellDispatch=process,n
added Template_OnScreenKeyboard (Windows 11) to fix On-Screen Keyboard freezes when used with sandboxed programs
Changed:
reduced constant GUI CPU usage by caching

Added:
Added Norwegian Bokmål translations #5141 (thanks divinity76)
Added user interface: highlight last used box #5054
Changed:
Added 'ClosedClsid={9BA05972-F6A8-11CF-A442-00A0C90A8F39}' to the default COM template to block ShellWindows
Fixed:
Fixed incompatibility with Thunderbird 146
Fixed no sound in confidential boxes without the "less confidential template"
Fixed issues with proxy tester (failed on non-English Windows due to the localization of ping.exe)
Fixed WinMerge keeps freezing because of registry reading issues #5122
Fixed running Firefox under Sandboxie causes AppModel-Runtime error(s) in Event Viewer #5135
Fixed Tor Browser tabs crash in highest security level #5116
Fixed Chrome Portable window tooltip gets stuck #5051
Fixed BSOD (0x50) in SbieDrv.sys during high-load GPU process creation on Windows Server 2022 #5149
Fixed OfficeClickToRun.exe always crash, WINWORD.EXE can not work properly #5153
Fixed prolonged lag when uninstalling/deleting software installed exclusively within the sandbox environment #5028

Added:
Added file search/filter to file panel can be opened with Ctrl+F in the file panel
Added UI for 'ProtectAdminOnly=y/n'
Fixed:
Fixed issue with SbieApi_QueryDrvInfo in 32-bit SbieDll.dll causing improper certificate warning

Added:
added checkbox for 'NoRestartOnPCA=y' to the box options
Changed:
reverted default 'UseWin32kHooks=y' back to 'n' as it caused issues with other apps
improved named syscall invocation when using wow64
Fixed:
fixed 'OpenWndStation=y' not working with 'SandboxieAllGroup=y'
fixed missing parameter validation in SbieIniServer
fixed issue with certificate parsing
fixed an issue retrieving driver info
fixed Potential Handle Leak in SbieDll.dll Related to SbieApi_DeviceHandle #5097

Changed:
'UseWin32kHooks=y' is now the default for all processes, greatly improving compatibility with Electron apps
Fixed:
fixed failed to connect to the driver on Windows 7 #5068
fixed Actual Budget no longer working #5071
fixed incompatibility with Firefox Nightly 146

Added:
added option to block non administrative session leader (sandman.exe or sbiectrl.exe) from accessing encrypted box data
Note: this is now enabled by default to disable it use 'ProtectAdminOnly=n'
Fixed:
Sandboxie-Plus 1.16.3 Fails to Connect to Driver on Windows Preview Build 27943 #5003
fixed latest signal crashing
Changed:
improved checks in Thread_CheckObject_CommonEx for encrypted boxes

The final release of Sandboxie-Plus version 1.16.2 / 5.71.2 consolidates and builds upon the significant advancements introduced in the recent pre-releases, delivering a more secure, compatible, and modernized sandboxing experience.
This version marks a major step forward in platform modernization. The underlying codebase has been updated to the MSVC 2022 toolset, while the user interface has migrated from Qt 5 to Qt 6. These changes provide better performance, improved security, and access to newer development features. However, they also necessitate the discontinuation of support for Windows 7 and 32-bit systems. Depending on user interest, an Extended Support Release (ESR) for older systems may be considered.
The update further refines usability and functionality. A new INI key validation feature, complete with per-key tooltips, has been integrated into the INI section editor, making advanced configuration safer and more accessible. SandMan now also supports an optional Windows 11-style visual theme, enhancing UI consistency on modern systems.
A major new feature allows administrators to redirect all files marked with the "Mark of the Web" into a designated sandbox, improving security by isolating potentially unsafe downloads. Forced process rules now support wildcards, and virtual sandboxes can be created without being written into the main configuration file, ideal for temporary or dynamically managed setups.
Under the hood, the DNS filter logic has been hardened to prevent unresolved domains from bypassing filtering, addressing a potential security flaw.
Additional improvements to system object handling now cover EventPair, KeyedEvent, and Timer types, enhancing compatibility with more applications.
The UAC subsystem can now invoke Sandboxie's own prompt, capable of simulating administrative rights without actual elevation, for more secure testing scenarios.
This release also addresses a range of bugs. Issues with incomplete shortcut paths, broken ne

Added:
Added Indonesian translation to the Plus UI 4bad4d1
Added template for WeType Input Method (IME)
Added host name support to proxy configuration (looking up host at WSA_Startup)
Instead of binding to IP, Sandboxie can now bind to adapter (resolving IPs at WSA_Startup)
Added support for %ProgramFiles(x86)% variable
Added TemplateDefaultFolders containing all the default paths to be created in a privacy enhanced box
Changed:
Weird sort in the Move Sandbox list #4615
Name and HwID information in the Support tab is now hidden by default but can be toggled as needed
Added alternative proxy relay implementation (instead of hacking existing sockets it starts relay threads) [EXPERIMENTAL]
Fixed:
Fixed the 'run in box' selection prompt not show BoxAlias
Fixed after Ctrl+F, the expansion and closure records of the Box Group were disrupted
Added additional checks to registry set/get functions
Fixed issue in Pool_Alloc
Fixed SbieCtrl.exe and SandMan.exe having a constant 3 MB/s IO rate in the Process Explorer
Fixed template for Tencent TIM cause drag and drop not available
Improved when Sandboxie.ini is huge, the response speed gets worse
Fixed MSI install can`t create AppDataRoamingMicrosoft folder in Data Protection Box
Fixed two errors in Sandboxie about time speeding and add two time function hook
Fixed an issue where the translation string of the protocol selection was saved in the configuration file
Fixed box picker icon
Fixed when the UI language change, toolbar unchanged
Fixed PingInfoView gives an error when running in Sandboxie
Fixed CollectProducts() Stuck in Loop When Uninstall Key Not Found
Fixed crashes with SbieDll.dll
Fixed Automatically download file when creating shortcut
Removed:
Removed the not-working "delete content" button