github.dev Download Folder button works as an "upload from local machine".

[ps-mkraines]

Select Topic Area

Bug

Body

A feature in github.dev seems not to work as expected and may be vulnarable to security exploitation.

When trying to "Download" a folder, I am having a Chrome window pop up inviting me to "Share" a local folder with the repository I am browsing.
This does not seem right.

Steps to replicate:

1. Navigate to https://github.dev/dotnet/aspnetcore
2. Right Click on a Folder and click "Download..."
   

Expected result: a zip file of the target folder is downloaded

Actual result: a Browser Window appears inviting you to share a folder with the website.

[ps-mkraines]

It looks like this is by design, as it actually does download the folder. Closing.