Eric Thanks for the detailed clarification. I sort of suspected it was so but wanted to be really sure.
Best wishes Josiah @TiddlyTweeter wrote: >> >> The import mechanism allows browsing to find a file to import. >> >> Is it possible to specify an exact address of a file (preferably with >> relative addressing) so you can just click a button and activate import? >> I'm not clear if its possible or how to do it if it is. >> > > Eric Shulman replied: > It's no longer possible, due to increases in browser security. > > If you could access an "exact address of a file" without going through the > system interface, then it would be possible to trick people into clicking a > button that reads system data without them knowing it. > > Basically, the system file I/O dialog box is limited by the browser so it > can be used to select a file, but the data *returned* by that box only > includes the filename, extension, and file *content*... but NOT the path to > the file, as that could be used to probe your local directory structure to > look for vulnerabilities (at least... that's the theory). > -- You received this message because you are subscribed to the Google Groups "TiddlyWiki" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/tiddlywiki. To view this discussion on the web visit https://groups.google.com/d/msgid/tiddlywiki/886b6446-333c-46bc-9705-ec3f9ebfac69%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
