Updates:
Status: WontFix
Cc: [email protected]
Comment #9 on issue 6003 by [email protected]: FEATURE REQUEST: File
upload by URL
http://code.google.com/p/chromium/issues/detail?id=6003
We can't do this for security. Even letting the user type a file path into
<input
type=file> is a disaster and has been removed from Firefox after an epic
struggle
patching vulnerabilities. Letting the user type a web URL (or rather,
letting a site
trick the user into typing a web URL) is a disaster. Imagine the user was
tricked
into typing "http://mail.google.com/mail"; or "http://www/";. Now they just
uploaded
their inbox or their intranet homepage to the attacker.
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---
