- From: anatoly techtonik <notifications@github.com>
- Date: Sat, 18 Jul 2015 02:47:43 -0700
- To: w3c/webcomponents <webcomponents@noreply.github.com>
Received on Saturday, 18 July 2015 09:48:14 UTC
My primary use case for now is to include common header: ``` <include src="header.html"/> ``` This should work locally without server side software. This raises security issues (as with PHP). It may happen that pages in subdirs need to include stuff from parent dirs, and this may lead to a lot of security issues. If I understand correctly, right now locally saved HTML file with malicious JS still, while loaded with the browser, still can not access local filesystem and read sensitive files. --- Reply to this email directly or view it on GitHub: https://github.com/w3c/webcomponents/issues/280#issuecomment-122523211
Received on Saturday, 18 July 2015 09:48:14 UTC