Gmail to Block JavaScript Attachments

gmail-to-block-javascript-attachments photo 1

We all know how dangerous it can be to try and open an email attachment from an address you don't recognize, so we don't do it, right? But that's only part of the problem. What if someone you know had their account compromised and is sending out malicious email attachments... Would you realize before clicking?

Google is well aware of this problem, with Gmail only last week being targeted by a very sneaky new phishing attack. To combat this, specific file type attachments are blocked by default, including .exe, .bat, .msc, and a whole host of other potentially dangerous file types. And in a couple of weeks another type is set to be added to the list.

gmail-to-block-javascript-attachments photo 2

From February 13, Google will start blocking JavaScript (.js) email attachments by default. JavaScript files are dangerous because they can trigger a download, which could have a malicious payload attached. Before you know it, your PC is infected.

Related

  • 36 Gmail Tips That Will Help You Conquer Email36 Gmail Tips That Will Help You Conquer Email
  • Gmail for iOS Gets Long-Awaited UpdateGmail for iOS Gets Long-Awaited Update

Anyone attempting to send a .js file using Gmail will automatically have it blocked before the email is sent. Trying to put the .js file inside an archive, e.g. a .zip file, will also be detected and blocked. This auto-blocking won't start happening until February 13, though, and the feature rollout could take as long as three days meaning you may not see it in action until February 16.

Of course, some users need to send one of the blocked file types over email. So instead of attaching it to an email, Google recommends uploading it to Google Drive. Alternatively, you could use one of the many other cloud storage services available to upload the file and then link to it in the email.

Recommended stories

How to Block Certain Android Apps from Syncing Passwords with Smart Lock

Google’s Smart Lock for Passwords makes it easy to sync the passwords you have saved in Chrome over to your Android device. Not only will it sync the passwords with Chrome on your phone, but also to supported apps—so you don’t have to remember your password for apps like Netflix or LinkedIn. The

How to Block JavaScript (and Ads) for a Single Site in Chrome

How-To Geek is an ad-supported site, so we’re not exactly excited to show people how to disable ads, but we’ll admit – there are some sites online that have so many ads that you just can’t deal with it. Luckily you can block JavaScript for just a single site if you want to.

More stories

Is Microsoft Edge Really Safer than Chrome or Firefox?

Microsoft is heavily pushing their Windows 10-exclusive browser, Edge. Ads built into Windows 10 are now claiming that Edge is “safer” than Chrome and Firefox. How did Microsoft determine that, and is it really true?

The Future of Autonomous Cars

Autonomous vehicles – or driverless cars – were originally marketed as vehicles created and built to ensure general road safety, and the well-being...