HexBrain

Brave Software · Report #1848062

download file type warning on Windows does not appear if "ask where to save file before downloading" setting is enabled

Validstatus
highseverity
31upvotes
10 May 2023disclosed

Summary

It was discovered that the "Ask where to save each file before downloading" setting disables the potentially-malicious file type warning for downloads in Brave. This behavior is also present in Chrome: https://bugs.chromium.org/p/chromium/issues/detail?id=1410578.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original