transmitting the user input made through the remote desktop application from the client device to a virtual computing instance that is executing in a physical machine connected to the client device over a network and hosting a remote desktop service for the client device;

detecting, by an application running inside the virtual computing instance, that the user input is to download a file through the application;

issuing, by an extension of the application running inside the virtual computing instance, a request to download the file from a specified location corresponding to the user input, sanitize the downloaded file to remove embedded codes in the downloaded file, and return the sanitized file;

sending, by a sanitation agent running inside the virtual computing instance, the request to a file sanitation server;

receiving, by the sanitation agent, the sanitized file from the file sanitation server; and

upon receiving the sanitized file by the sanitation agent, saving the sanitized file in a folder managed by the virtual computing instance.