add API spec: IsEnhancedSecurityModeEnabled

[GittyHarsha]

API to configure Enhanced Security Mode states

[GittyHarsha]

@microsoft-github-policy-service agree company="Microsoft"

[oldnewthing]

is there a possibility that such a mixed mode could arrive in the future? E.g. SetEnhancedSecurityModeExemptDomains("contoso.com") which lets you say "Turn on ESM for all non-contoso sites"?

Could be

enum CoreWebView2EnhancedSecurityMode
{
    Off,
    On,
   // future: OnForUntrustedDomains
}

runtimeclass CoreWebView2Profile
{
    CoreWebView2EnhancedSecurityMode EnhancedSecurityMode { get; set; }
}

?

[oldnewthing]

Right now, ESM does two things. Suppose that we later think of a third thing. Would we

1. Add it to the things you get when you enable ESM
2. Make it another tier of ESM that apps have to opt into [IsEnhancedSecurityMode =very true]
3. Make it an entirely separate feature (Super-Secure Mode) that apps have to opt into separately from ESM

[FrankC-msft]

My expectation based on reading "enabling additional OS protections" is that a third thing could already quietly light up when ESM is on.

If we create this as an enum to make it extensible, should probably be { Off, Strict } (instead of "On") since 3rd+ values (e.g. "Balanced" being supported) would be different flavors of "on".