conda / conda/menuinst

Convoluted windows shortcut code causing security problems

Open
#468 11 comments 1 reaction 1 assignee Claimed by @lrandersson View on GitHub
type::bug
Dominant language
Python
Stars
50
Forks
49
Avg merge
1d 11h
Merged PRs (30d)
16

Description

### Checklist

- [x] I added a descriptive title
- [x] I searched open reports and couldn't find a duplicate

### What happened?

When creating a shortcut on Windows, the code that the shortcut is running is something like this:

```
C:\WINDOWS\system32\cmd.exe /D /C START /MIN "" "C:\WINDOWS\system32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle hidden "start 'C:\Users\path\to\miniforge3\envs\myapp_env\Menu\myapp 1.0.0.bat' -WindowStyle hidden"
```

Something about this is being flagged by our security software as malicious. Why is it so convoluted? Is there an easier way than having one shell calling another shell and having multiple hidden flags in the mix?

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.