This is interesting. What it is doing is skirting the security issue by
saying the only data you can send via their modified request object, is data
that you have selected. So it looks like in FF3+ you can do a file upload
without using a standard HTML form. But since no other browser supports it,
I would not think it would be something that qooxdoo would try and
incorporate (just my opinion). I can't speak for everyone, but I need to
write apps that can be used by all current browsers. And I don't want to
write special code just for FF and code for the rest of the browsers. For me
the days of writing browser specific code are over. I use a technique
similar to the file upload contribution and it works in all browsers.
Thanks for pointing this out. Perhaps other browsers will see the light and
do the very same thing.
Jim
On Fri, Jan 30, 2009 at 1:17 AM, Florian Giesen <
[email protected]> wrote:
> Hello Jim,
>
> if I am not understanding something completely wrong, which is always a
> realistic option ;-) , these two articles are producing evidence that it is
> possible with the nsIDOMFile API and the new method
> XMLHttpRequest.sendAsBinaryData(...) to implement pure AJAX fileuploads and
> other fancy functions without compromising the browser security because
> there is still no access to the filesystem (no local paths are given) and
> accessing the files content is read-only.
>
> 1.
> http://soakedandsoaped.com/articles/read/firefox-3-native-ajax-file-upload
> 2. http://igstan.blogspot.com/2009/01/pure-javascript-file-upload.html
>
> Florian
>
>
> 2009/1/29 Jim Hunter <[email protected]>
>
>> Yes, from what I read of the API, you are not reading it correctly. The
>> API gives you read-only access to the values. From there you can not place
>> that information back into another field to be submitted to the server. As I
>> stated, that would be a HUGE security hole and ASAIK it will never be
>> allowed by standard JavaScript for that reason.
>>
>> Jim
>
>
>
>
> ------------------------------------------------------------------------------
> This SF.net email is sponsored by:
> SourcForge Community
> SourceForge wants to tell your story.
> http://p.sf.net/sfu/sf-spreadtheword
> _______________________________________________
> qooxdoo-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/qooxdoo-devel
>
>
------------------------------------------------------------------------------
This SF.net email is sponsored by:
SourcForge Community
SourceForge wants to tell your story.
http://p.sf.net/sfu/sf-spreadtheword
_______________________________________________
qooxdoo-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/qooxdoo-devel
