Re: Is the security model XBL uses wrong?

[Ian Hickson]

On Thu, 28 Jun 2001, Stuart Ballard wrote:
>
> I just realized that it probably *is* necessary for XBL form bindings to
> be privileged: <input type="file"> requires access to privileged
> functions to put up a filepicker dialog and also raw filesystem access
> to read the resulting file for upload. How do you propose to do *that*
> with only the privileges of remote HTML?

<input type="file"> is very, very special and shouldn't really be
considered when talking about XBL. We are likely to make <input
type="file"> unskinable, unbindable, and have the methods on its binding
uncallable. Don't be surprised if, in fact, we just use C++ to do the file
control binding. ;-)

-- 
Ian Hickson                                     )\     _. - ._.)       fL
Netscape, Standards Compliance QA              /. `- '  (  `--'
+1 650 937 6593                                `- , ) -  > ) \
irc.mozilla.org:Hixie _________________________  (.' \) (.' -' __________