Blocking .exe/.com requests

[thehawk]

Hi.

Today i entered a website which had an img src tag linking to an .exe file which my antivirus blocked as it was malware. How possible would it be for NoScript to take care of such requests, hence blocking .exe/.com/.bat and any other executable files in the same way .js are blocked?

Thank you.

[Alan Baxter]

If I recall correctly, Firefox respects Windows XP's security settings. It already prevents applications and other unsafe files from being automatically downloaded or executed. The default settings require the user to explicitly allow those actions. It may be possible for you to modify your Internet settings so that these kinds of files are automatically rejected without you even getting a prompt. Something like checking Disable for both
Control Panel > Internet Options > Security > Internet > Custom Level > Launching applications and unsafe files
Control Panel > Internet Options > Security > Internet > Custom Level > Launching programs and files in an IFRAME

I'll try that now and see it it works.

Edit: Yup, even if I explicitly allow the download when prompted, Firefox quietly cancels the download.
http://kb.mozillazine.org/Unable_to_sav ... _-_Windows

[thehawk]

Thanks Alan, very kind, I took note of these two settings. Strangely enough I always thought they applied only to IE

They were set to PROMPT. So I believe the reason why my AntiVirus came up is because I have this additional layer in my system. Without it I would have gotten a prompt?

[Alan Baxter]

Thanks Alan, very kind, I took note of these two settings. Strangely enough I always thought they applied only to IE

You're welcome. Don't be embarrassed. I think Firefox quietly started respecting that setting with Fx 3.5. It's controversial, partly because most people don't know about it and and an IE Internet Zone security setting of High completely prevents downloading .exe files. Most people want to be able to do that, and when it unexpectedly but quietly doesn't work -- for some reason unknown to them -- it's a bit disconcerting.

They were set to PROMPT. So I believe the reason why my AntiVirus came up is because I have this additional layer in my system. Without it I would have gotten a prompt?

Yes.