title: Custom browser scheme. What can be launched and what is considered safe
body: <p>I'm looking into creating a custom browser scheme for launching local apps in windows 10. So far I can get it to launch any exe file. My original plan was to create a jar (java is my 1st language) that takes in a parameter and launches the program in the parameter. This is doable as long as jre is installed on my machine, so I figured lets try this in shell script insted of java....but it seems I can't launch shell script from my scheme. Is it <em>only</em> exe files that will launch on windows through schemes and I need something (like cygwin) in front of the shell script to launch it?</p>
  <p>Secondly...what I'm doing propably isn't safe at all, but Im not finding much info on what is considered good practice. Should I whitelist the programs that can be launched? The programs need to be installed locally which gives some degree of safety, but I can't figure out if I'm making it possible to launch random commands as well ( which would be baaaad :) )?</p>