New issue
Advanced search Search tips

Issue 681702 link

Starred by 4 users

Issue metadata

Status: WontFix
Owner:
Closed: Aug 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug-Regression



Sign in to add a comment

Give us the option to disable "this type of file can harm your computer" warning

Reported by freshene...@gmail.com, Jan 16 2017

Issue description

UserAgent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36

Steps to reproduce the problem:
1. Download any EXE

What is the expected behavior?
I want the file to just download (not auto run)

What went wrong?
It gives me the message "This type of file can harm your computer" every fucking time I download an EXE

Did this work before? Yes I don't remember

Chrome version: 55.0.2883.87  Channel: stable
OS Version: 6.3
Flash Version: Shockwave Flash 24.0 r0

I understand that chrome wants to babysit its users and tell them that exes can harm their computer. Fine, great. We don't need it EVERY TIME. We need a way to disable that message. I know exes can harm my computer, I don't want to have to click twice for every download. GIVE US THE OPTION TO SKIP THAT WARNING. 

I've heard that this option is there to prevent auto-run of viruses, but I'm still getting it and I don't have auto-run turned on.
 

Comment 1 by woxxom@gmail.com, Jan 16 2017

Use an extension to download the files, there are at least several good ones. Be realistic, Chrome won't have that option because only a small amount of people really needs it: the majority either don't download exe or download only signed installers for popular stuff so they don't see the warning.
I call bullshit. Literally every single person downloads executables. That's how you install programs. Are you seriously saying most people don't install programs? You're telling me only unsigned installers give the warning, but its simply not true. I just tried downloading google chrome and it gives me the damn warning. Its out of control.

Comment 3 by ajha@chromium.org, Jan 17 2017

Components: -UI UI>Browser>Downloads
Labels: Needs-Triage-M55

Comment 4 by woxxom@gmail.com, Jan 17 2017

Ah, so you mean the built-in Windows security warning:
https://www.google.com/search?q=open+file+security+warning&tbm=isch

You can disable it by editing Windows policy.
Anyway it's not something Chrome is responsible for.
No, I don't. I attached a file showing how chrome itself is warning me about its own installer.
chromeExeWarning.jpg
37.0 KB View Download

Comment 6 by woxxom@gmail.com, Jan 17 2017

Oh. Maybe you've disabled "Protect you and your device from dangerous sites" option in Chrome settings? The thing is I saw this "keep/discard" warning just a few times over the years downloading lots of exe installers. I also have Windows Defender enabled.
Cc: kkaluri@chromium.org
Labels: -Needs-Triage-M55 M-57
Status: Untriaged (was: Unconfirmed)
considering this as a feature request and changing the status to untriaged.

Thank You...
Thanks Kaluri!

Comment 9 by dah...@chromium.org, May 11 2017

Labels: -M-57
Owner: nparker@chromium.org
Status: Assigned (was: Untriaged)
nparker@, how does safe browsing feel about giving users an option never show the warning dialogue for exe?
That warning shouldn't be showing every time unless
a) You've disabled Safe Browsing ("Protect you and your device..")
or
b) Your machine can't reach Google and therefore can't verify the .exe is safe.

It also shouldn't show on sites you've downloaded from before (before a day ago), even with SB disabled.

I don't think a setting is appropriate to disable these warnings, given the threats and the conditions above.  Most users won't see these warnings.
> Most users won't see these warnings.
I see them again & again, downloading legitimate zip files on linux (free site themes). Browser can reach google.

Found more complaints at
https://productforums.google.com/forum/#!topic/chrome/8EWWmsoo0H8

Can you provide URL to a site that is consistently warning?

The complaint post was from a user who disabled Safe Browsing, so the warnings are expected there.
https://store1.myshopify.com/
https://store2.myshopify.com/
...
Screenshot from 2017-06-10 00-10-46.png
12.6 KB View Download
Ah, you're getting a different warning that what's described in this bug.

The "... is not commonly downloaded and may be dangerous" means that is (or  contains) an executable file that is not known to be safe, and file is uncommonly downloaded. Those won't go away if you visit the same site repeatedly, but can go away if Safe Browsing is able to verify the file is safe.  Can you share the directory listing of that zip?  The URLs you provided don't generate downloads ("Sorry this shop is currently unavailable.")
Why is chrome being so big-brother about this stuff? Chrome shouldn't be warning about binaries that "aren't known to be safe" - it should only warn about binaries that are likely dangerous. Innocent until proven guilty ffs!

Also, I disabled "Protect you and your device from dangerous sites" in the hopes that these messages would go away. They didn't. 
Can you share the directory listing of that zip? No, sorry.

Also, I'm on Linux. 


Status: WontFix (was: Assigned)
Without a working download URL or data about what's in the zip that caused this, we have no way to diagnose if this is a mis-classification. Feel free to open another bug if you have a repro case.  Thanks.

Sign in to add a comment