What is MIME type "application/hta"?

A MIME type is a string that tells browsers and other tools how to handle a particular kind of file.

application/hta is a MIME type for HTML Applications. These files use HTML and scripting to run as standalone programs in Windows. They execute with the Internet Explorer engine but without the normal browser interface.

Files with the HTA extension let developers build local apps that can interact directly with system components. They work like web pages but with extended system privileges.

Main use: Running local applications on Windows.
Capabilities: Execute scripts, manage system tasks, and provide custom interfaces.
Practical applications: Administrative tools, automation scripts, and local utilities.
Security note: These apps bypass many browser restrictions, so they must be used in trusted environments.

For more details on HTML Applications, visit HTML Application (Wikipedia).

Associated file extensions

.hta

Usage Examples

HTTP Header

When serving content with this MIME type, set the Content-Type header:


    Content-Type: application/hta

HTML

In HTML, you can specify the MIME type in various elements:


    <a href="file.dat" type="application/hta">Download file</a>

Server-side (Node.js)

Setting the Content-Type header in Node.js:


    const http = require('http');    
    
    http.createServer((req, res) => {    
      res.setHeader('Content-Type', 'application/hta');    
      res.end('Content here');    
    }).listen(3000);

Associated file extensions

.hta

FAQs

Which browsers support the application/hta MIME type?

Native support for application/hta is exclusive to the Internet Explorer engine on Windows. Modern browsers like Chrome, Firefox, and Edge do not execute HTA files directly within the browser window for security reasons; instead, they will prompt the user to download the file.

How do I configure a web server to serve .hta files correctly?

You must define the MIME type so browsers recognize the file as an application rather than standard HTML. For Apache, add AddType application/hta .hta to your configuration. For Nginx, add application/hta hta; inside your mime.types block or config file.

Why are HTA files considered a security risk?

Files served as application/hta bypass the standard browser security sandbox. Unlike a regular text/html page, an HTA file has full access to the operating system, allowing it to read/write files and modify the registry, which makes it a common vector for malware if downloaded from untrusted sources.

Can I run application/hta files on macOS or Linux?

No, HTA files are specifically designed for the Microsoft Windows operating system and rely on the built-in mshta.exe utility and Internet Explorer components. To run them on Linux or macOS, you would need compatibility layers like Wine or a virtual machine running Windows.

What is the main difference between an HTML file and an HTA file?

While both use HTML and JavaScript, an HTA runs as a standalone desktop application without browser navigation buttons or address bars. Crucially, HTA files have elevated privileges, allowing scripts to interact with the user's computer in ways that standard web pages cannot.

Why does my browser download the .hta file instead of running it?

Due to the high security risks associated with arbitrary code execution, modern web browsers force application/hta files to download rather than execute automatically. Users must manually open the file from their device to run the HTA application.

General FAQ

What is a MIME type?

A MIME (Multipurpose Internet Mail Extensions) type is a standard that indicates the nature and format of a document, file, or assortment of bytes. MIME types are defined and standardized in IETF's RFC 6838.

MIME types are important because they help browsers and servers understand how to process a file. When a browser receives a file from a server, it uses the MIME type to determine how to display or handle the content, whether it's an image to display, a PDF to open in a viewer, or a video to play.

MIME types consist of a type and a subtype, separated by a slash (e.g., text/html, image/jpeg, application/pdf). Some MIME types also include optional parameters.

How do I find the MIME type for a file?

You can check the file extension or use a file identification tool such as file --mime-type on the command line. Many programming languages also provide libraries to detect MIME types.

Why are multiple MIME types listed for one extension?

Different applications and historical conventions may use alternative MIME identifiers for the same kind of file. Showing them all helps ensure compatibility across systems.