[gnome-initial-setup/mcatanzaro/sandbox] Enable web process sandbox

[Michael Catanzaro <mcatanzaro src gnome org>]

commit 01b7c5a30fcfe9b74c614364ce1417245a60b0c4
Author: Michael Catanzaro <mcatanzaro gnome org>
Date:   Mon Jun 15 09:26:56 2020 -0500

    Enable web process sandbox
    
    This will make it a lot harder for Mozilla Corporation to hack our users
    via its privacy policy webpage! ;)

 gnome-initial-setup/gis-driver.c | 4 ++++
 1 file changed, 4 insertions(+)
---
diff --git a/gnome-initial-setup/gis-driver.c b/gnome-initial-setup/gis-driver.c
index ae42d52c..a73442e8 100644
--- a/gnome-initial-setup/gis-driver.c
+++ b/gnome-initial-setup/gis-driver.c
@@ -26,6 +26,7 @@
 #include <errno.h>
 #include <locale.h>
 #include <stdlib.h>
+#include <webkit2/webkit2.h>
 
 #include "cc-common-language.h"
 #include "gis-assistant.h"
@@ -884,9 +885,12 @@ gis_driver_startup (GApplication *app)
 {
   GisDriver *driver = GIS_DRIVER (app);
   GisDriverPrivate *priv = gis_driver_get_instance_private (driver);
+  WebKitWebContext *context = webkit_web_context_get_default ();
 
   G_APPLICATION_CLASS (gis_driver_parent_class)->startup (app);
 
+  webkit_web_context_set_sandbox_enabled (context, TRUE);
+
   if (priv->mode == GIS_DRIVER_MODE_NEW_USER)
     connect_to_gdm (driver);