Hi, Lohith!

Using file:/// from a web page is generally a security nightmare.
Browser makers have been battling security problems for years and
years now.  Generally they have many problems, look bad, scramble
to fix it and send out patches.  These days you better keep up
with your patches or you will be vulnerable.

http://www.w3.org/Security/Faq/wwwsf2.html

If it was a perfect world where software could be constructed without
errors, then perhaps we would see a safe way to allow controlled
access to file:///.  But at the present state of the art, even
after trying to lock everything down on the browser client,
it's nothing but a continuing struggle.

The problem is not how can we figure out how to write a
browser that can access your local files, or how to encode URLs
that would do it.
The problem is that no one can figure out how to do it safely.

The one time in which your browser allows you to upload a local file,
and it's only manually, is when you see a form with a local
file upload button that opens a standard open-file browse dialog box to
allow you to choose what file to upload.  In this case you have manual
control over it, and therefore as a user you can make sure that
only what you are intending to allow is sent.

You could of course try to write your own http client
and then you are freer to do what you want on your own machine,
but standard browser developers are forced to be highly security
conscious or else people will not use their browser.

-Galt

> Dear UCSC list,
> 
> I am trying to use my html webpage (sample text shown below) as the
> url parameter in track line
> 
> <A NAME="rs7591"></A>
> <H2>rs7591</H2>
> <P>This is a section that provides additional information about SNP rs7591.
> <BR>
> <BR>Item: rs7591
> <BR>Chromosome: 17
> <BR>Begin in Chromosome: 60955543
> <BR>End in Chromosome: 60955543
> <BR>Genomic Size: 1
> <BR>Unadjusted P-value: 0.7352
> <HR>
> 
> My text file for creating custom track is:
> 
> browser position chr17:60955144-61067645
> track name="Custom_SNPs" description="SNPs on XXXXXX gene from GWAS
> study" visibility=1 color=255,0,0 db=hg18 group="varRep"
> url="file:///C:/Users/Lohith/Documents/Shared_Documents/doc.html#$$"
> chr17 60955543        60955543        rs7591
> 
> I want to display the SNP and pvalue associated with it as a custom
> track. I just have shown one SNP here. I am using a local file
> C:/Users/Lohith/Documents/Shared_Documents/doc.html#$$ (also tried
> file:///C:/Users/Lohith/Documents/Shared_Documents/doc.html#$$) to
> display the p-value and other info. I am not using any external html
> url. Will it not work with user made local html files?
> 
> I get the following error using the above two files: Couldn't find
> rs7...@chr17:60955543 in ../trash/ct/ct_genome_5a1f_9941e0.bed
> 
> Please let me know what's wrong with the input files that the genome
> browser cannot use my local html file when I click the snp in custom
> track... I appreciate your advise.
> 
> Thanks in advance
> Lohith
> _______________________________________________
> Genome maillist  -  [email protected]
> https://lists.soe.ucsc.edu/mailman/listinfo/genome

_______________________________________________
Genome maillist  -  [email protected]
https://lists.soe.ucsc.edu/mailman/listinfo/genome

Reply via email to