Download Protection: IMESX files are not checked
Reported by
resea...@nightwatchcybersecurity.com,
Apr 5 2016
|
||||||
Issue descriptionVERSION Chrome Version: 49.0.2623.110 (Official Build) m (32-bit) Operating System: Windows 2012 R2; version 6.3.9600 REPRODUCTION CASE IMESX files can be used to add a search provider to Microsoft IME and are not checked. Windows does show a warning. We can provide a patch. Sample file: snow-white.cocolog-nifty.com/first/msime/google.imesx
,
Apr 6 2016
,
Apr 20 2016
I'm unable to reproduce this issue. When I open the link you shared, Chrome doesn't offer to download the file. Instead, Chrome renders it as a text file. Marking as WontFix for now. Please re-open the bug with the steps to reproduce this problem more clearly.
,
Apr 20 2016
@vakh - mime type issue, try this: https://theowl.xyz/cr/600592/google.imesx
,
Apr 20 2016
Thanks for sharing that link. As you mentioned in the bug description, Windows shows a warning to the user. That makes this case outside the scope of the SafeBrowsing VRP program.
,
Mar 9 2017
,
Mar 10 2017
For all Download Protection VRP bugs: removing label Restrict-View-Google and adding Restrict-View-SecurityTeam instead.
,
Mar 11 2017
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
||||||
►
Sign in to add a comment |
||||||
Comment 1 by nparker@chromium.org
, Apr 6 2016