1476118 - Add "oxt" to the list of executable extensions in download protection

Status: RESOLVED FIXED

(Toolkit :: Safe Browsing, enhancement, P1)

Description

[François Marier [:francois]]

diff --git a/download_file_types.asciipb b/download_file_types.asciipb
index ec8d9de..445cb89 100644
--- a/download_file_types.asciipb
+++ b/download_file_types.asciipb
@@ -8,7 +8,7 @@
 ##
 ## Top level settings
 ##
-version_id: 20
+version_id: 21
 sampled_ping_probability: 0.01
 max_archived_binaries_to_report: 10
 default_file_type {
@@ -822,6 +822,17 @@ file_types {
   uma_value: 302
   ping_setting: FULL_PING
 }
+file_types {
+  # OpenOffice extension, can execute arbitrary code.
+  # https://crbug.com/862163
+  extension: "oxt"
+  uma_value: 317
+  ping_setting: FULL_PING
+  platform_settings {
+    danger_level: ALLOW_ON_USER_GESTURE
+    auto_open_hint: DISALLOW_AUTO_OPEN
+  }
+}
 
 ##
 ## Windows-specific files

Comment 1

[Dimi Lee [:dimi]]

Attachment: Bug 1476118 - Add .oxt to the list of executable extensions in download protection. r?francois

Comment 2

[François Marier [:francois]]

Comment on attachment 9004238 [details]
Bug 1476118 - Add .oxt to the list of executable extensions in download protection. r?francois

François Marier [:francois] has approved the revision.

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/953cfa4e5a85
Add .oxt to the list of executable extensions in download protection. r=francois

Comment 4

[Andrei Ciure[:aciure]]

https://hg.mozilla.org/mozilla-central/rev/953cfa4e5a85