Bureaucrats, canmove, Confirmed users
642
edits
Firefox 3.6/HTML5 File Objects Security Review: Difference between revisions
Jump to navigation
Jump to search
m
Firefox 3.6/HTML5 File Objects Security Review (view source)
Revision as of 21:05, 25 August 2009
, 25 August 2009→Review comments
| Line 49: | Line 49: | ||
== Review comments == | == Review comments == | ||
* Currently people who drag a desktop file and drop it into a browser window (all browsers, not just Firefox) will have the page contents replaced by the new file -- they aren't giving the file contents to the old page. This will change that expectation. Need some front-end signifier that there's a change in behavior/expectation. Cursor change? Drop target in page? A popup confirmation dialog? (kidding) | * Currently people who drag a desktop file and drop it into a browser window (all browsers, not just Firefox) will have the page contents replaced by the new file -- they aren't giving the file contents to the old page. This will change that expectation. Need some front-end signifier that there's a change in behavior/expectation. Cursor change? Drop target in page? A popup confirmation dialog? (kidding) | ||
* Page gets info about file. Should not include path (currently doesn't), name and extension is OK. | |||
* only transfer data between pages with the same principal | |||