We have an application that runs as a custom shell/kiosk in windows. One part of this application provides access to a web portal (via a .NET BrowserControl).
The problem is this web portal allows users to browse the filesystem via
<input type="file>. Our concern is that with access to this file browser dialog, the user could compromise the system.
Is there a way to prevent filesystem related dialogs from EVER appearing for a particular user or group in windows via group policy? If not, are there any more specific solutions to this problem?
We can modify the kiosk application but not the web portal, and the web portal functionality is a requirement.