Posted by Lee on Oct 05

Haifei Li, changing the default behavior to open a window asking the
user where to save the file would change nothing. A “normal user”
would just click the “save” button to save the file in the default
folder. I also don’t think it should be the browser’s responsibility
to look for potential malicious DLLs in that directory. This “normal
user” may not even use the browser to execute this executable file…