Edge - "download" attribute of anchor elements


[ 2016-10-13 ] MSRC said "WON'T FIX"
[ 2017-04-11 ] Silently Patched in the Windows Creators Update.

MS Edge will open the default associated app without user confirmation or anything! This works with different extensions, at least with .txt and .css files.

All we need is a download attribute in the anchor element.

<a href="text.txt" download>Link</a>


Open default associated program to .txt files

Open default associated program to .css files


In this particular PoC we are doing a click() on the first link to prove that we don't even need user interaction.
Can we open other file-types? I don't know. Sorry! No time to research these days, but enjoy and try to achieve something from here!


Broken Browser
@magicmac2000