You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Dec 16, 2017. It is now read-only.
So this is an interesting issue and I'm certainly willing to listen to other reasoning and viewpoints. Here's the background behind the original design (which, again, is always subject to review).
Downloaded files are dangerous and we want to make sure an analyst never accidentally executes malicious code by accident.
The file name may be misleading and not reflect the actual file type. Examining the actual file signature is more accurate for this purpose.
We should log the original file name so that it can be reconstructed or analyzed as needed.
However, to re-iterate, if there is a good reason to change this design, or a good way to do it that achieves all the appropriate goals, then we could do that. How would maintaining the original extension help?
When the archives are downloaded, it would be nice to maintain the original file extension, so it is easier to use them later.
The text was updated successfully, but these errors were encountered: