Merge pull request #24409 from brave/features/security-mitigation-policy-windows

[VPN] enable Mitigation Policy for Windows Services

browser/brave_vpn/win/brave_vpn_helper/main.cc

@@ -29,6 +29,12 @@ const char kLogFile[] = "log-file";
 }  // namespace
 
 int main(int argc, char* argv[]) {
+  // Process Mitigation Redirection Policy
+  PROCESS_MITIGATION_REDIRECTION_TRUST_POLICY signature = {0};
+  DWORD dwSize = sizeof(signature);
+  signature.EnforceRedirectionTrust = 1;
+  SetProcessMitigationPolicy(ProcessRedirectionTrustPolicy, &signature, dwSize);
+
   // Initialize the CommandLine singleton from the environment.
   base::CommandLine::Init(argc, argv);
   auto* command_line = base::CommandLine::ForCurrentProcess();

browser/brave_vpn/win/brave_vpn_wireguard_service/main.cc

@@ -71,6 +71,12 @@ std::optional<int> ProcessUserLevelCommands(
 }
 
 int APIENTRY wWinMain(HINSTANCE instance, HINSTANCE prev, wchar_t*, int) {
+  // Process Mitigation Redirection Policy
+  PROCESS_MITIGATION_REDIRECTION_TRUST_POLICY signature = {0};
+  DWORD dwSize = sizeof(signature);
+  signature.EnforceRedirectionTrust = 1;
+  SetProcessMitigationPolicy(ProcessRedirectionTrustPolicy, &signature, dwSize);
+
   // Initialize the CommandLine singleton from the environment.
   base::CommandLine::Init(0, nullptr);
   auto* command_line = base::CommandLine::ForCurrentProcess();