Safebrowsing check file extensions that open in IE.

chrome/browser/download/download_extensions.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <set>
 #include <string>
 
 #include "chrome/browser/download/download_extensions.h"
 
 #include "base/strings/string_util.h"
@@ skipping 49 matching lines @@
 
     // Flash files downloaded locally can sometimes access the local filesystem.
     {"swf", DANGEROUS, DISALLOW_AUTO_OPEN},
     {"spl", DANGEROUS, DISALLOW_AUTO_OPEN},
 
     // Chrome extensions should be obtained through the web store. Allowed to
     // open automatically because Chrome displays a prompt prior to
     // installation.
     {"crx", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
 
+    // Included for parity with kSafeBrowsingFileTypes.
+    {"bin", NOT_DANGEROUS, ALLOW_AUTO_OPEN},
+
     // Windows, all file categories. The list is in alphabetical order of
     // extensions. Exceptions are made for logical groupings of file types.
     //
     // Some file descriptions are based on
     // https://support.office.com/article/Blocked-attachments-in-Outlook-3811cddc-17c3-4279-a30c-060ba0207372
 #if defined(OS_WIN)
     {"ad", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
 
     // Microsoft Access related.
     {"ade", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},  // Project extension
@@ skipping 85 matching lines @@
 
     // Device installation information.
     {"inf", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 
     // Generic configuration file.
     {"ini", DANGEROUS, ALLOW_AUTO_OPEN},
 
     // Microsoft IIS Internet Communication Settings.
     {"ins", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
 
+    // InstallShield Compiled Script.
+    {"inx", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
+
+    // InstallShield Uninstaller Script.
+    {"isu", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
+
     // Microsoft IIS Internet Service Provider Settings.
     {"isp", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
 
+    // Windows Task Scheduler Job file. No handler is registered by default, so
+    // this is probably normally not dangerous unless saved into the task
+    // scheduler directory.
+    {"job", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
+
     // JavaScript file. May open using Windows Script Host with user level
     // privileges.
     {"js", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 
     // JScript encoded script file. Usually produced by running Microsoft Script
     // Encoder over a .js file.
     // See https://msdn.microsoft.com/library/d14c8zsc.aspx
     {"jse", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 
     // Shortcuts. May open anything.
@@ skipping 33 matching lines @@
     {"msi", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"msp", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"mst", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 
     // ActiveX Control.
     {"ocx", DANGEROUS, DISALLOW_AUTO_OPEN},
 
     // Microsoft Office Profile Settings File.
     {"ops", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
 
+    // Portable Application Installer File.
+    {"paf", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
+
+    // Extensions that will open in IE even when chrome is set as default
+    // browser.
+    {"partial", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
+    {"xrm-ms", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
+    {"svg", NOT_DANGEROUS, ALLOW_AUTO_OPEN},
+    {"xml", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
+    {"xsl", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
+
     // Microsoft Visual Test.
     {"pcd", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
 
     // Program Information File. Originally intended to configure execution
     // environment for legacy DOS files. They aren't meant to contain executable
     // code. But Windows may execute a PIF file that is sniffed as a PE file.
     {"pif", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 
     // Developer Studio Build Log.
     {"plg", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
@@ skipping 14 matching lines @@
     {"ps2", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"ps2xml", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"psc1", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"psc2", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 
     // Registry file. Opening may cause registry settings to change. Users still
     // need to click through a prompt. So we could consider relaxing the
     // DISALLOW_AUTO_OPEN restriction.
     {"reg", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 
+    // Registry Script Windows.
+    {"rgs", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
+
     // Microsoft Windows Explorer Command.
     // See https://support.microsoft.com/kb/190355 for an example.
     {"scf", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
 
     // Microsoft Windows Screen Saver.
     {"scr", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 
     // Microsoft Windows Script Component. Microsoft FoxPro Screen.
     // A Script Component is a COM component created using script.
     // See https://msdn.microsoft.com/library/aa233148.aspx for an example.
     {"sct", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
 
     // Microsoft Windows Shortcut into a document.
     // See https://support.microsoft.com/kb/212344
     {"shb", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
 
     // Shell Scrap Object File.
     {"shs", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
 
     // System executable. Windows tries hard to prevent you from opening these
     // types of files.
     {"sys", DANGEROUS, DISALLOW_AUTO_OPEN},
 
+    // U3 Smart Application.
+    {"u3p", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
+
     // Internet Shortcut (new since IE9). Both .url and .website are .ini files
     // that describe a shortcut that points to a URL. They can point at
     // anything. Dropping a download of this type and opening it automatically
     // can in effect sidestep origin restrictions etc.
     {"url", DANGEROUS, DISALLOW_AUTO_OPEN},
     {"website", DANGEROUS, DISALLOW_AUTO_OPEN},
 
     // VBScript files. My open with Windows Script Host and execute with user
     // privileges.
     {"vb", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"vbe", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"vbs", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
+    // Some sites claim .vbscript is a valid extension for vbs files.
+    {"vbscript", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 
     {"vsd", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
 
     // Microsoft Visual Studio Binary-based Macro Project.
     {"vsmacros", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
 
     {"vss", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
     {"vst", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
 
     // Microsoft Visio Workspace.
@@ skipping 34 matching lines @@
   // Shell languages. (OS_ANDROID is OS_POSIX.) OS_WIN shells are handled above.
 #if defined(OS_POSIX)
     {"bash", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"csh", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"ksh", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"sh", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"shar", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"tcsh", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 #endif
 #if defined(OS_MACOSX)
+    // Automator Action.
+    {"action", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
+
     {"command", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
+
+    // Automator Workflow.
+    {"workflow", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 #endif
 
   // Package management formats. OS_WIN package formats are handled above.
 #if defined(OS_MACOSX) || defined(OS_LINUX)
     {"pkg", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 #endif
 #if defined(OS_LINUX)
     {"deb", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"rpm", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
+
+    // "common" executable file extensions for linux. There's not really much
+    // reason to block since they require execute bit to actually run. Included
+    // for histograms and to match kSafeBrowsingFileTypes.
+    {"out", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
+    {"run", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 #endif
 #if defined(OS_ANDROID)
     {"dex", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 #endif
 };
 
 // FileType for files with an empty extension.
 const FileType kEmptyFileType = {nullptr, NOT_DANGEROUS, DISALLOW_AUTO_OPEN};
 
 // Default FileType for non-empty extensions that aren't in the list above.
@@ skipping 27 matching lines @@
 
 DownloadDangerLevel GetFileDangerLevel(const base::FilePath& path) {
   return GetFileType(path).danger_level;
 }
 
 bool IsAllowedToOpenAutomatically(const base::FilePath& path) {
   return GetFileType(path).auto_open_hint == ALLOW_AUTO_OPEN;
 }
 
 }  // namespace download_util