Forum Discussion
sylvainrodrigue
Apr 10, 2019Brass Contributor
How the new Edge will handle file:// URI ?
file: links seems to be ignored in this version of Edge (like they are in Chrome). In the previous version of Edge however (and all IE versions), clicking on a file: link opens the original document....
dbeuscher
Mar 05, 2021Copper Contributor
If IE is deleted, or at least disabled in "add and removed windows components", and the only Windows browser available to users is Edge; does this warning still apply?
MartyMiller
Mar 05, 2021Copper Contributor
I think the answer is yes. A bad guy could send you an email or direct you to a website that has a hyperlink that uses your custom URL protocol and launch whatever you're custom protocol allows to be launched on your in internal client machines. For example:
<a href="Myfile://C:/Windows/system32/notepad.exe">notepad.exe</a>
will launch Notepad.exe on the client machine using the registry setup I mentioned March 3rd. The powershell command in the registry needs to be changed to only allow .DOC files to be opened if that is all you need.