This probably warrants for a bug report. I tested it out and to me it seems that the server tries to execute the file due to it's name, when you click it. This happens despite any chain in permissions on the uploaded file.

Reply via email to