- From: Charles Pritchard <chuck@jumis.com>
- Date: Thu, 26 Aug 2010 20:14:59 -0700
On 8/26/2010 7:53 PM, Jonas Sicking wrote: > On Thu, Aug 26, 2010 at 5:24 PM, Charles Pritchard<chuck at jumis.com> wrote: >> Chrome has gone ahead with their setData proposal, enhancing the >> event.dataTransfer >> object so that users may drag a file from within the browser onto their >> desktop. > I would think that a same-origin check should always be performed. In > firefox, the save-as dialog always displays the website you are > downloading from. However with drag'n'drop no dialog will be shown and > the user will presumably think he/she is downloading from the site > where the drag started. > > Or are browsers planning on displaying the save-as dialog? I think that save-as dialogs are implementation-specific. For example, OS X-based prompts happen when you first open a file, not when downloading. The HTML 5 UI/UA permissions are built upon the idea that drag/drop confers a similar permissibility to right click + context menu actions.
Received on Thursday, 26 August 2010 20:14:59 UTC