Yes, as long as the agent is a browser that’s able to run JavaScript and store Cookies.
No, there’s only one (technically more) file extension restriction, .exe.
.exe