What is the correct way to create a file extension (and maybe a MIME type) that will run from your local file system without prompt, but if you browsed to that file through Internet Explorer or Firefox you would get prompted (warned)? What is the exact mechanism in the windows registry that controls this?
Share
This mechanism is not controlled by the registry.
What IE does is add a NTFS stream to downloaded files, specifcying which zone it was downloaded from.
For example, I just downloaded notepad++, and performed the following command to show the alternate stream:
c:\Downloads>more <npp.5.4.5.installer.exe:Zone.IdentifierWhich outputted:
Windows explorer / ShellExecute uses this alternate stream as a means to trigger the “unsafe” warning.