When using webmail or a forum or something like that, we can use an upload feature to send a file from our pc to the website. when we do so, the full path becomes visible in the "upload from" window in those pages. I was thinking, could it be seen by the site? either directly or using a javascript attack to record the temporary input in the said window. is that possible?

Reply via email to