[ PoC ] kPointerLock — Missing Browser-Side Sandbox Enforcement

Component : content/browser/renderer_host/render_widget_host_impl.cc:3281
Interface : blink.mojom.FrameWidgetInputHandler::RequestMouseLock
Pattern   : renderer-only check, browser never re-validates sandbox flags
Same bug  : 491676472 (kModals, fixed 2025-03-12)

STEP 1 — verify requestPointerLock is available

STEP 2 — call from sandboxed context (simulated)

STEP 3 — check browser-side source for missing IsSandboxed() call

RESULT —