Are there standard / lauch installation mechanisms for a single website with one click?

The reason I'm asking for is mainly due to how Google Chrome installation works after clicking the Accept and Install button from Firefox. After you click the button, the installation will begin directly, and when it is completed, Chrome will start.

Firefox doesnโ€™t display the Save or Confirm dialogs after clicking the Install button (on the Chrome installation web page).

Now, is that standard behavior? Or it may be due to the fact that the old version of Chrome is already installed on the computer (Note: the new version is still installed from Firefox).

It seems a little risky for me, all you have to do is trick the user with a mouse click, and then you can do whatever you want on your machine, or? Personally, I thought that such things only work with IE / ActiveX.

+3
source share
4 answers

Looking at the code of the download page is chrome, they seem to use three mechanisms:

  • Standard Download
  • OneClick (using the Google Update Plugin)
  • ClickOnce (using a plugin with support for the .NET Framework)

ClickOnce is widely available due to the ubiquity of .NET 3.5 SP 1 (in which it is linked).

+3
source

. , - Firefox. Opera, IE Safari. . IE, , ActiveX. .

Microsoft , , ClickOnce. .NET Framework..NET Framework Firefox ClickOnce, setup.exe.

+2

Google updater ( Omaha), . .

, , , , .

+1
source

(speculative) I suspect that the old installation or, rather, its update took over. As for the risk: if the guys from Chrome have completed their homework (and I suspect they have), Chrome will check for a signature in the file, etc., before starting anything. This is standard behavior for updaters (at a minimum) and prevents abuse at this point.

0
source

Source: https://habr.com/ru/post/1744122/


All Articles