Couldn't process file abc.resx due to its being in the internet or Restricted zone or having the mark of the web on the file. Remove the mark of the web if you want to process these files
One of the Visual Studio C# project was building fine. After VS 2017 update and McAfee updates, I rebooted the machine and after that I have getting the below mentioned error and the project is failing to build.
"Couldn't process file abc.resx due to its being in the internet or Restricted zone or having the mark of the web on the file. Remove the mark of the web if you want to process these files. Remove the mark of the web if you want to process these files."
==========================
Windows OS Version
Windows 10 64 bit
Attached screen capture of windows updates and version
==========================
Visual Studio version info:
Microsoft Visual Studio Professional 2017
Version 15.7.5
VisualStudio.15.Release/15.7.5+27703.2042
Microsoft .NET Framework
Version 4.7.03062
Installed Version: Professional
Visual C++ 2017 00370-10000-16567-AA601
Microsoft Visual C++ 2017
Application Insights Tools for Visual Studio Package 8.12.10405.1
Application Insights Tools for Visual Studio
ASP.NET and Web Tools 2017 15.0.40625.0
ASP.NET and Web Tools 2017
ASP.NET Core Razor Language Services 15.7.31476
Provides languages services for ASP.NET Core Razor.
ASP.NET Web Frameworks and Tools 2012 4.0.21208.0
For additional information, visit https://www.asp.net/
ASP.NET Web Frameworks and Tools 2017 5.2.60618.0
For additional information, visit https://www.asp.net/
Azure App Service Tools v3.0.0 15.0.40608.0
Azure App Service Tools v3.0.0
Azure Data Lake Node 1.0
This package contains the Data Lake integration nodes for Server Explorer.
Azure Data Lake Tools for Visual Studio 2.3.3000.2
Microsoft Azure Data Lake Tools for Visual Studio
Azure Functions and Web Jobs Tools 15.0.40608.0
Azure Functions and Web Jobs Tools
Azure Stream Analytics Tools for Visual Studio 2.3.3000.2
Microsoft Azure Stream Analytics Tools for Visual Studio
C# Tools 2.8.3-beta6-63029-08. Commit Hash: e9a3a6c0ba5b1fde8b1fff964bdfb3fb768ee2eb
C# components used in the IDE. Depending on your project type and settings, a different version of the compiler may be used.
Common Azure Tools 1.10
Provides common services for use by Azure Mobile Services and Microsoft Azure Tools.
Fabric.DiagnosticEvents 1.0
Fabric Diagnostic Events
JavaScript Language Service 2.0
JavaScript Language Service
Microsoft Azure HDInsight Azure Node 2.3.3000.2
HDInsight Node under Azure Node
Microsoft Azure Hive Query Language Service 2.3.3000.2
Language service for Hive query
Microsoft Azure Service Fabric Tools for Visual Studio 2.2
Microsoft Azure Service Fabric Tools for Visual Studio
Microsoft Azure Stream Analytics Language Service 2.3.3000.2
Language service for Azure Stream Analytics
Microsoft Azure Stream Analytics Node 1.0
Azure Stream Analytics Node under Azure Node
Microsoft Azure Tools 2.9
Microsoft Azure Tools for Microsoft Visual Studio 2017 - v2.9.10420.2
Microsoft Continuous Delivery Tools for Visual Studio 0.3
Simplifying the configuration of continuous build integration and continuous build delivery from within the Visual Studio IDE.
Microsoft JVM Debugger 1.0
Provides support for connecting the Visual Studio debugger to JDWP compatible Java Virtual Machines
Microsoft MI-Based Debugger 1.0
Provides support for connecting Visual Studio to MI compatible debuggers
Microsoft Visual C++ Wizards 1.0
Microsoft Visual C++ Wizards
Microsoft Visual Studio Tools for Containers 1.1
Develop, run, validate your ASP.NET Core applications in the target environment. F5 your application directly into a container with debugging, or CTRL + F5 to edit & refresh your app without having to rebuild the container.
Microsoft Visual Studio VC Package 1.0
Microsoft Visual Studio VC Package
NuGet Package Manager 4.6.0
NuGet Package Manager in Visual Studio. For more information about NuGet, visit https://docs.nuget.org/.
ProjectServicesPackage Extension 1.0
ProjectServicesPackage Visual Studio Extension Detailed Info
ResourcePackage Extension 1.0
ResourcePackage Visual Studio Extension Detailed Info
SQL Server Data Tools 15.1.61804.210
Microsoft SQL Server Data Tools
Test Adapter for Boost.Test 1.0
Enables Visual Studio's testing tools with unit tests written for Boost.Test. The use terms and Third Party Notices are available in the extension installation directory.
Test Adapter for Google Test 1.0
Enables Visual Studio's testing tools with unit tests written for Google Test. The use terms and Third Party Notices are available in the extension installation directory.
ToolWindowHostedEditor 1.0
Hosting json editor into a tool window
TypeScript Tools 15.7.20419.2003
TypeScript Tools for Microsoft Visual Studio
Visual Basic Tools 2.8.3-beta6-63029-08. Commit Hash: e9a3a6c0ba5b1fde8b1fff964bdfb3fb768ee2eb
Visual Basic components used in the IDE. Depending on your project type and settings, a different version of the compiler may be used.
Visual F# Tools 10.1 for F# 4.1 15.7.0.0. Commit Hash: 173513e369ffb7a1c4d5dccf83696d9aac2ab2d0.
Microsoft Visual F# Tools 10.1 for F# 4.1
Visual Studio Code Debug Adapter Host Package 1.0
Interop layer for hosting Visual Studio Code debug adapters in Visual Studio
Visual Studio Tools for CMake 1.0
Visual Studio Tools for CMake
Windows Machine Learning Generator Extension 1.0
Windows Machine Learning Visual Studio Extension Detailed Info
=========================
Mc Afee updates:
System Information
Computer Name:
McAfee Agent
Version number: 5.0.6.220
Status: Managed
SuperAgent: Peer to Peer
McAfee ePO Deep Command Discovery Plugin
Version number: 2.4.1.465
Language: Multiple
McAfee DLP Endpoint
Version number: 10.0.250.92
Language: English (United States)
McAfee Drive Encryption Agent
Version number: 7.2.5.24
Language: Multiple
McAfee Drive Encryption Go
Version number: 7.2.5.24
Language: Multiple
McAfee Drive Encryption
Version number: 7.2.5.24
Supportability Client
Version number: 3.1.0.0
Language: English (United States)
Service Pack
Version: 1948
Install Date: 11/17/2017 7:08:08 PM
McAfee Endpoint Security
Version number: 10.5
For module and content information, view the About page
in the McAfee Endpoint Security Client
Copyright © 1995-2017 McAfee LLC.
All Rights Reserved.
www.mcafee.com
===========================
Add Comment
I am also getting this error with the Visual Studio 15.7.5 build.15.7.4 processes my .resx file correctly/normally.
I am also getting the same error, also on 15.7.5 build. It won't open the file to edit either. Interestingly, I opened the file in a text editor, and can't find the comment for the mark of the web. Can be replicated by trying to build ProjToolV2 from github, which can be pulled from here.
After checking the recent release notes, I wonder if this is related to changes based on CVE-2018-8172 | Visual Studio Remote Code Execution Vulnerability, deployed in 15.7.5 based on the release notes.
Same thing here (v. 15.7.5). Of course my file is not in the internet nor in a restricted zone. What's "the mark of the web"?
Is there a way to escalate this? Is the solution to uninstall Visual Studio and reinstall the older version?
I am also facing the same problem. Is there a way to workaround this issue in the .cs or the .csproj file generators itself?
credit - https://superuser.com/questions/44503/how-do-i-tell-windows-7-to-trust-a-particular-network-location
Try this:
- Start Menu > type 'Internet Options'.
- Select Local intranet zone on the Security tab then click the Sites button
- Click Advanced button
- Enter
file://[computer name] - Make sure 'Require server verification...' is unticked
I'm closing this ticket because it's not currently actionable by us. We will continue to monitor the ticket and the proposed solutions to assess the impact. We tried really hard to balance the usability of this feature (resx can support arbitrary resources, by design) and security (people can put bad things in the resx file). In most cases users are not affected by this change as most resx files won't be downloaded via the browser or only contain safe contents like string. We understand that some of you are affected and will continue to investigate solutions that have a better balance if there are any.
Thank you for your feedback!
I have been researching this issue for past 2 months. Looks like the best solution is disable the security feature from .NET framework. The setting to disable it is located at
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft.NETFramework\SDK]
"AllowProcessOfUntrustedResourceFiles"="true"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\SDK]
Thanks! This is quite useful.
For my case, the issue was related to base64 strings being stored in the .resx files that triggered the untrusted resource file in VS. Basically, there were graphics images embedded in the resource file. I would not just set this flag to true, unless you were absolutely sure of the provenience of the resources.
THE BEST SOLUTION
Go to the file in Windows's File System
Right Click/porperties/Security Tab/ unlock the file / Apply
Absolutely! Needs to restart Visual Studio and will work fine.
Solution by
Add Comment
This solution worked for me. I had quite a few files in sub folders which were blocked so I ran the below PowerShell command
gci -Recurse "C:\Code" | Unblock-File
Thanks @BILLUPS Robert (Brent)
And what when, I have still issue ? I didn't downloaded file from internet. That project was build from scratch. In project after selecting Properties, in Windows Explorer nothing happened, i don't have "unblock" option, only default 3 options (read only, hidden, archived). Any ideas ?
Even I didn't get "unblock" option when I right clicked on the file and chose Properties..
I ran the UnBlock-File command in PowerShell (mentioned in my previous comment) and rebuilt the solution in VS 2017 and all projects got built fine.
Can you try executing the below mentioned command in PowerShell and check if the issue gets resolved?
gci -Recurse "<Folder directory to your code>" | Unblock-File
Still nothing. I tried Powershell single files unblock and option with folder. Rebuild project and still the same error. I've red that is from that update https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-8172 probably. I have no time, because my deadline is near, so I have to find solution for this problem.
Ok, tell me one thing. I have this project on Qnap. I tried copy it on lical hard drive and everything rebuild well.
So what i can do, to work on my local network version of project.
Just to add that if you've got the source from a Zip file, then if you unblock the zip file before extraction you won't have to unblock each file
Solution by
Add Comment
This is exactly what helped work around this bug for me as I also have my code on a network drive.
Thanks for the solution/workaround. I hope MS will fix this anyway as pictures (base64 streams) in a resx file are nothing unsafe in general.
This is exactly help me as well. I tried other suggestion but not work. Thank you so much.
I followed the steps as mentioned in the URL https://www.winhelponline.com/blog/bulk-unblock-files-downloaded-internet/ to resolve this issue. Followed Method 1 in my case and it worked
Great! this link help me to follow the steps to unblock my files.
Thank you. I truly believe you just saved me hours and hours of research.
