On 13 Jun 2012, at 3:50am, Simon Slavin <[email protected]> wrote:

> So we have an excellent JavaScript-SQLite bridge but it's intentionally 
> prevented from accessing SQLite databases you keep on your computer.  So it's 
> useful only if you only ever need to access the database inside a specific 
> browser. But then I thought … well, since it turns out that everyone 
> implements this using SQLite, what would happen if I did an ATTACH ?

And the results … nope.  The browsers I've tried it in prevent ATTACH and 
similar subterfuges in various different ways.  Strangely, they don't seem to 
explicitly trap it or provide an error code for it, but they've either removed 
it from the built-in version of SQLite they use, or the permissions the process 
runs under bar access to arbitrary folders.  I'm pleased everyone cared about 
security and annoyed that I can't use the slick HTML5 database functions to do 
what I want.

Simon.
_______________________________________________
sqlite-users mailing list
[email protected]
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users

Reply via email to