Toshihito Kikuchi 3bc1f2c50b Bug 1605308 - Do not use ShellExecuteByExplorer when a downloaded file is an executable. r=Gijs,froydnj
This is one of the efforts to reduce usage of `ShellExecuteByExplorer`
(bug 1620335).

The purpose of using `ShellExecuteByExplorer` in the scenario to open a
downloaded file is to support applications which are not compatible with
the mitigation policies of our process.  When a downloaded file is an
executable, however, we prefer security to compatibility and in particular
we want to prevent binary planting on a user's download directory.

The proposed fix is to go to `ShellExecuteExW` straight if the target
file to launch is an executable.

Differential Revision: https://phabricator.services.mozilla.com/D66325

--HG--
extra : moz-landing-system : lando
2020-03-12 22:05:34 +00:00
..