maltrieve
maltrieve copied to clipboard
Feature request: maintain original file extension
When the archives are downloaded, it would be nice to maintain the original file extension, so it is easier to use them later.
So this is an interesting issue and I'm certainly willing to listen to other reasoning and viewpoints. Here's the background behind the original design (which, again, is always subject to review).
- Downloaded files are dangerous and we want to make sure an analyst never accidentally executes malicious code by accident.
- The file name may be misleading and not reflect the actual file type. Examining the actual file signature is more accurate for this purpose.
- We should log the original file name so that it can be reconstructed or analyzed as needed.
However, to re-iterate, if there is a good reason to change this design, or a good way to do it that achieves all the appropriate goals, then we could do that. How would maintaining the original extension help?