Background about my app
I have a browser macro-recording app built with Selenium. Basically users can use Firefox like normal and record their actions into macros to replay.
In Selenium, I can only download files if I whitelist the mime type. I've found a large txt of mime types here. To make my automated browser as functional as possible, I'm thinking I can just whitelist all of them.
If I do this, then whenever my browser wants to download something it will not prompt for confirmation and will immediately download it to a pre-determined location.
I'm wondering if whitelisting all mime-types will make my macro-recorder less secure than Firefox would otherwise be. I.e. is there any malicious behavior this opens me up to? I recognize that somebody could download a malicious script as an executable and I could be tricked into opening it. I like to think I would be careful enough not to do this, so for the sake of this question I'm asking about other cases.