W3C home > Mailing lists > Public > whatwg@whatwg.org > March 2009

[whatwg] "C:\fakepath\" in HTML5

From: Lachlan Hunt <lachlan.hunt@lachy.id.au>
Date: Tue, 24 Mar 2009 11:00:19 +0100
Message-ID: <49C8AF33.1050305@lachy.id.au>
Ian Hickson wrote:
> Maybe someone from Opera could let us know which sites caused them to do
> this? Was it many, as with Microsoft?

I did a quick search through our bugs and found this site that breaks if 
only the filename is returned because there's an onsubmit script that 
checks the value for the presence of either a slash or backslash.

https://www.freedfm.com/

Specifically, the following code:

if((strFileName.indexOf("\\") == -1) && (strFileName.indexOf("/") == -1))
{
   alert("Please do not type your filename. Click Browse and upload your 
zip file.");
   document.fileupload.UploadFileData.focus();
   return false;	
}

-- 
Lachlan Hunt - Opera Software
http://lachy.id.au/
http://www.opera.com/
Received on Tuesday, 24 March 2009 03:00:19 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Wednesday, 30 January 2013 18:47:49 GMT