The possibility of running a shell command from an extension (NPAPI) has been phased out, but custom protocol handlers are still supported.

What is the practical difference if an extension can still launch any executable via the protocol handler?

  • 1
    isn't it up to the OS to route requests to the assigned application? Then, however this application handles those requests is the potential security risk – Purefan Jan 13 '17 at 13:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.