WebLables and user rights

Hi,

if I click a Weblink in a script interface it start chrome with admin rights.
The github link in the about windows is ok and uses standard rights.

Same API (Process.Start) is used in both methods, so in theory they should not differ.
I will research about how to launch web browser as a standard user privilege.

WebLabel (code)

Code: [Select]

Hyperlink hyperLink = new Hyperlink()
{
    NavigateUri = new Uri(info.URL),
};
hyperLink.Inlines.Add(uiCtrl.Text);
hyperLink.RequestNavigate += (object sender, RequestNavigateEventArgs e) =>
{
    Process.Start(e.Uri.ToString());
};
block.Inlines.Add(hyperLink);


AboutWindow (code)

Code: [Select]

private void Hyperlink_RequestNavigate(object sender, System.Windows.Navigation.RequestNavigateEventArgs e)
{
    Process.Start(e.Uri.AbsoluteUri);
    e.Handled = true;
}


Hi ied206,

your right, about window also launches browser with admin rights.
I must have had already an other chrome instance running that time.

I don't know c# well, but I use 3 Win32 API to launch an app "de-elevated" -

SaferCreateLevel
SaferComputeTokenFromLevel
CreateProcessAsUser

This problem was fixed in recent nightly build, through the use of UACHelper library.