In bug 1950056 we established that the Windows file open/save dialog dereferences lnk/url files itself, so the consumer cannot really protect itself from this. So we tried telling the file dialog to never do that, but the consequence of that turned out to be that "shortcut" folders also became un-navigable (bug 1958222 and its 10 or so duplicates), because Windows does not distinguish between linked files or folders. Given that that more thorough fix is unavailable, as noted in the original bug and in comment 0 here, we already sanitize filenames in a lot of places, and we should work out why devtools is the "odd one out" here (vs. save link as... and various other paths to saving files).
Bug 1961777 Comment 1 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
In bug 1950056 we established that the Windows file open/save dialog dereferences lnk/url files itself, so the consumer cannot really protect itself from this. So we tried telling the file dialog to never do that, but the consequence of that turned out to be that "shortcut" folders also became un-navigable (bug 1958222 and its 10 or so duplicates), because Windows does not distinguish between linked files or folders. Given that that more thorough fix is therefore not really viable, as noted in the original bug and in comment 0 here, we already sanitize filenames in a lot of places, and we should work out why devtools is the "odd one out" here (vs. save link as... and various other paths to saving files).