How do I open file attachments without executing code that may be included in those files?
Oracle B2C Service, All versions
When working with file attachments, users should be careful when opening files which may contain code that will be executed.
Of particular concern are executable files (.exe) which, when opened, can perform any operation on your system. It is recommended that executable files be deleted from the incident.
html files (.htm)
behavior files (.htc)
cascading style sheets (.css)
text files (.txt)
Instead of clicking on the file attachment link for these types of files, it is recommended that the user instead right-click the link and save the file. After the file has been saved it should be examined inside of a text editor such as Notepad.