Inline file download controls in remote browser isolation system

A method in a server for downloading a file, on behalf of a client browser, via an isolated browser of the server, the method including:

• receiving from a browser engine of the isolated browser an indication that a download of the file by the browser engine at the server was detected, the downloaded file saved at the server;
• determining whether the file is permitted for download by the client browser;
• responsive to determining that the file is not permitted for download by the client browser,
• deleting the downloaded file at the server, and
• transmitting a policy event to the client browser;
• and
• responsive to determining that the file is permitted for download by the client browser, transmitting the downloaded file to the client browser.

A remote browser isolation system in a server for downloading a file on behalf of a client browser, the system including:

• one or more processors;
• and
• one or more memory devices that store program code to be executed by the one or more processors, the program code comprising:
• a remote isolated browser of the server configured to:
• access a web page on behalf of the client browser;
• stream pixels representing an image of the web page to the client browser;
• and
• download a file from a web server on behalf of the client browser;
• and
• an isolated browser controller configured to:
• receive from a browser engine of the remote isolated browser an indication that the downloaded file was received;
• determine whether download of the file to the client browser is permitted;
• responsive to determining that a download of the file to the client browser is not permitted:
• transmit a download block notification to the client browser;
• and
• responsive to determining that the download of the file to the client browser is permitted:
• transmit the downloaded file to the client browser.