Skip to content
This repository was archived by the owner on Apr 21, 2022. It is now read-only.
This repository was archived by the owner on Apr 21, 2022. It is now read-only.

Don't add defender exclusion by default #433

@Hades32

Description

@Hades32

Adding exclusions to an anti-virus is opening the system to new attack vectors, especially when it's a guessable/well-known location which is user-writable.

Therefore, it should be possible (as a developer) to completely remove this option, or even better to remove it by default and add an explicit toggle to enable it with some note, that this is a potentially risky thing to do

Ref:

Section "Add %LOCALAPPDATA%\\${config.dirname} to Windows Defender exclusions (highly recommended for performance!)"
ExecShell "" '"$0"' "/C powershell -ExecutionPolicy Bypass -Command $\\"& {Add-MpPreference -ExclusionPath $\\"$LOCALAPPDATA\\${config.dirname}$\\"}$\\" -FFFeatureOff" SW_HIDE
SectionEnd

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions