Google Browser launches mail client Outlook based on HTML page

Web page HTML code, you can set the e-mail link through <a href= "Mailto:xxxx" >.

In the Web page, clicking the link launches a default mail client, such as Windows Outlook.

Of course, you can also set up a browser to open other mail clients.

So, how does the browser know where the mail client is? The following is an example of Google Chrome on Windows.

After clicking on the email link, two important actions will be generated. The first action is to read the registry ("The picture is too long compressed, right-click on the New tab to open the Picture" "):

Visible, the location of the mail client executable files and parameters, long ago in the registry, should be installed in the software when the time is filled in, and is recognized location for the browser to find.

Re-observing the behavior of the browser in the creation process, you can find the second important action ("The picture is too long compressed, right-click on the New tab to open the Picture" "):

As you can see, with the path and parameters of the executable file from the registry, just call the Windows Createprocss function to start the mail client.

In this way, if the corresponding location of the registry is written to the path of the malicious program, then the consequences are unimaginable.

It can be seen how important it is to protect the Windows registry.

Google Browser launches mail client Outlook based on HTML page