Re: upload and upload/filename

Micah Dubinko wrote:

>Hello,
>
>  
>
>>May the instance node referenced by upload contain initial data?
>>    
>>
>Yes.
>
>  
>
>>may the instance node referenced by upload/filename contain an initial
>>    
>>
>filename
>Yes. It is, however, *just* a filename. Nothing in the spec says to access
>the file or to put its contents into the instance data.
>  
>
A sane (security-wise) implementation would, in fact, never populate the 
file data using that filename.  It only writes to this field when the 
user changes the file.  JavaScript, additionally, can change instance 
data nodes (they are, after all, just XML elements) and it would be a 
real nono for upload inputs to take that data.

--John

Received on Thursday, 26 September 2002 14:29:08 UTC