search

NiklasGollenstede / native-ext

A node.js endpoint for Chrome and Firefox to connect to via Native Messaging
MIT License
56 stars 3 forks source link

[Advice? Suggestion?] Use vbscript instead of mshta to display dialogs on Windows #10

Closed Hattshire closed 5 years ago

Hattshire commented 5 years ago

Windows defender keeps yelling at me when I try to open native-ext. Sometimes I can make it run, sometimes Defender is in it's red moments. I've searched around if there is a node library that would make it better, and I've got

https://github.com/tomas/dialog/blob/b37e0cf7af801aeb35e2d22c2d3e114dc16a421b/index.js#L75-L110

The library hasn't activity from February through.

https://github.com/NiklasGollenstede/native-ext/blob/4e81ff114457bcd28e5a188c71c0d3fa5bd7c6b2/application/src/index.js#L32-L39

NiklasGollenstede commented 5 years ago

The reason why I chose the mshta solution is that it does not require an external script file. You can only call cscript with a path to a file, it is not possible to directly provide the code on the command line (I have researched that). But NativeExt is not necessarily unpacked at the time the dialogs are used, so an external script file does not exist (which, besides its poor code quality, is the reason why I didn't use the dialog module in the first place). The only option would be to write a temporary file and delete it later. I don't like that.

You also mention Windows Defender. I had problems with anti virus programs before, but what makes you thing this dialog business is related to virus detection? Is mshta a red flag for anti viruses?

Hattshire commented 5 years ago

You also mention Windows Defender. I had problems with anti virus programs before, but what makes you thing this dialog business is related to virus detection? Is mshta a red flag for anti viruses?

Well, some antivirus are kinda mean with programs using Shell ActiveXObjects from javascript due to them being used for malicious things a whole bunch of times. So sadly is an unfair (and dumb) legacy that still remains.

I found this, maybe it's useful. https://superuser.com/a/1290352

I can't give updated feedback since I'm not using any exts currently so I'll close this for now (no feedback from other pp here either)