on december 8th , the javascript team unveiled a configuration changing which resolves this problem by essentially disabling the use of the shell : an external protocol handler .
A shell is an external protocol handler.