Open Bug 1475702 Opened 7 years ago Updated 2 years ago

[meta] Download protection should look inside archive files

Categories

(Toolkit :: Safe Browsing, enhancement, P3)

Product:
Toolkit
Component:
Safe Browsing
Type:
enhancement

Tracking

()

People

(Reporter: francois, Unassigned)

References

(Depends on 3 open bugs, Blocks 1 open bug)

Details

(Keywords: meta)

A few things to note about Chrome's implementation: - all decompressors are run in a separate "utility" process that is heavily sandboxed (and their parser code has been fuzzed too) - they also decompress the various aliases for .zip and .dmg (e.g. .iso, .dmgpart, etc.) -- list of aliases is in the Chromium source code - they don't recursively decompress files, but they consider a zip-within-a-zip suspicious and do a remote lookup for those
Depends on: 1260856
Depends on: 1167040
No longer depends on: 1167040
Depends on: 1475705
Depends on: 1475706
Depends on: 1480639
Keywords: meta
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.