Comment #4 on issue 6003 by lcamtuf: FEATURE REQUEST: File upload by URL
http://code.google.com/p/chromium/issues/detail?id=6003

Actually, doesn't it actually kinda work in Windows right now?

At the very least, on my box, clicking on an input type=file box, going to  
the 'open'
dialog, and entering an URL such as  
http://lcamtuf.coredump.cx/d/nauszniki.jpg would
actually result in the retrieved .jpg being sent to the server.

Otherwise, if we want to make it platform-independent, there are several  
minor
security considerations that boil down to never allowing a malicious page  
specify (or
even provide a file name hint) for the URL to be uploaded, very much like  
it is
currently the case with regular type=file inputs.

/mz

--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---

Reply via email to