W3C home > Mailing lists > Public > public-webapps@w3.org > July to September 2009

Re: HTTP status code equivalents for file:// operations - compat with xhr

From: timeless <timeless@gmail.com>
Date: Tue, 18 Aug 2009 13:22:49 +0300
Message-ID: <26b395e60908180322m6d737f0eyb88177cebb4cde6e@mail.gmail.com>
To: "Michael A. Puls II" <shadow2531@gmail.com>
Cc: Anne van Kesteren <annevk@opera.com>, public-webapps@w3.org
I'd rather we formally indicate that using file urls in
XMLHttpRequests is not expected to work with an explanation that there
are security concerns which prevent XMLHttpRequest safely exposing
arbitrary file urls.

People who need access to local files should use a locally bound web
server or if the content is something they control, JSON or an iframe.

something like:
In order for implementations to protect their users, XMLHttpRequest
implementations MAY choose not to support file urls or MAY choose
whatever error values they like.
Received on Tuesday, 18 August 2009 10:23:30 UTC

This archive was generated by hypermail 2.3.1 : Friday, 27 October 2017 07:26:18 UTC