Maybe we need a base rule for URL links directly to executable content...
MIMEDefang rejects content with executable extensions. The list of extensions is configurable. (.com is a pain because it also appears in domain names which are commonly used as part of filenames, like "report on my domain example.com.doc".)
