[whatwg] "C:\fakepath\" in HTML5

So instead of fixing the web, we're "fixing" the spec (and thus implementing 
fakepath in browsers)?


----- Original Message ----- 
From: "Lachlan Hunt" <lachlan.hunt@lachy.id.au>
To: "Ian Hickson" <ian at hixie.ch>
Cc: <whatwg at whatwg.org>
Sent: Tuesday, March 24, 2009 11:00 AM
Subject: Re: [whatwg] "C:\fakepath\" in HTML5


> Ian Hickson wrote:
>> Maybe someone from Opera could let us know which sites caused them to do
>> this? Was it many, as with Microsoft?
>
> I did a quick search through our bugs and found this site that breaks if 
> only the filename is returned because there's an onsubmit script that 
> checks the value for the presence of either a slash or backslash.
>
> https://www.freedfm.com/
>
> Specifically, the following code:
>
> if((strFileName.indexOf("\\") == -1) && (strFileName.indexOf("/") == -1))
> {
>   alert("Please do not type your filename. Click Browse and upload your 
> zip file.");
>   document.fileupload.UploadFileData.focus();
>   return false; }
>
> -- 
> Lachlan Hunt - Opera Software
> http://lachy.id.au/
> http://www.opera.com/
>

Received on Tuesday, 24 March 2009 07:56:29 UTC