I don't know which is weirder, that jscript files are still executable by default on Windows in 2017 or that google only just decided to block .js files to handle this security problem.