Microsoft is bringing Internet Explorer closer to modern standards by cutting one of the old features

by
url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url url

Key insights

  • Internet Explorer no longer allows HTA files to be opened directly from the download dialog box to prevent malicious attacks.
  • HTML applications, unlike regular HTML, are not secure because they have unrestricted access to system resources.
  • Users must install the September Patch Tuesday Update or later to access the updated IE download dialog.



Microsoft killed Internet Explorer last year, forcing users to switch to Microsoft Edge or other alternatives. However, thanks to Internet Explorer mode (IE mode) in Microsoft Edge, you can still access websites and applications based on Internet Explorer technologies on Windows 11 and Windows 10 PCs. And if you're one of those people who still uses Internet Explorer or Internet Explorer in IE mode, Microsoft has introduced a major change in how it handles HTA (short for HTML Application) files.


Internet Explorer no longer allows you to open HTA files directly from the download dialog box

Screenshot of Internet Explorer under Windows XP


HTAs aren't quite the same as regular HTML files, especially when it comes to security. To put that in perspective, modern HTML files operate in a restricted environment and therefore cannot manipulate system resources, protecting you from malicious attacks. HTAs do the exact opposite: they give you unrestricted access to your system resources, putting your PCs at risk. And due to their inherent unrestricted nature, Microsoft has removed the ability to open HTAs directly from Internet Explorer's download dialog box.


The Internet Explorer Download dialog box now only contains “Save” and “Save As” options, which means you cannot accidentally run a malicious HTA file by clicking directly on the “Open” option. Instead, you now have to open .hta files manually after saving them using the Save or Save As options. You cannot open HTAs in browsers like Chrome. However, if you try to download it using Chrome, you'll likely receive a warning from Google that the file may be malicious.

However, Internet Explorer's latest security measure isn't for everyone. On its support page, Microsoft has made it clear that users must install the September Patch Tuesday Update or later to get the updated IE download dialog. Microsoft wrote the following in their support document:


HTML application files (.hta) can pose a security risk when opened directly from the Download dialog box in Internet Explorer and in Internet Explorer mode in Microsoft Edge.

Due to this vulnerability, we have removed the option to open .hta files from the download dialog. This change will be included in Windows Updates released on or after September 10, 2024.

Remember: You can save .hta files using the Save or Save As options and then open them manually.

Leave a Comment