Data URLs with executables and misleading download dialog

Type opera
Reporter Opera
Modified 2007-02-09T00:00:00


The data URL scheme allows authors to embed binary files,instead of using links to external files. Data URLscontaining file types that Opera can display are renderedinline; other file types will be handled by Opera'sdownload dialog. A bug in Opera's file download handling causes the downloaddialog to give wrong information to the user when a data URLwith an executable file is loaded. In some cases, it willtell the user that the file will be opened with NOTEPAD.EXE.Although this is not usual (Opera opens text/plain itself bydefault) the user would reasonably expect that the file wasa text file, since NOTEPAD.EXE is a text editor. But whenthe user clicks "Open", the file is executed.