- From: Boris Zbarsky <bzbarsky@MIT.EDU>
- Date: Mon, 09 Sep 2002 02:45:41 -0400
- To: Lachlan Cannon <luminosity@members.evolt.org>
- Cc: www-style@w3.org
> > Now I suppose that browser makers could disable all of these methods of
> > filename input and force all users to use the browse button.... but it's
> > a much smaller hassle for the _user_ to just have the file upload
> > control always look the same.
>
> I don't doubt you, I was just pointing out that security isn't the
> domain of styling, but of the people who make the software.
Sure. So we could follow the lead of other DOM specs and develop the
spec without regard to potential security and privacy abuses.
I'm not convinced we should specify things which no software maker could
in good conscience implement, however.... The whole point of having a
spec is that it gets implemented...
Boris
--
Conway's Law:
In any organization there will always be one person
who knows what is going on. This person must be fired.
Received on Monday, 9 September 2002 02:45:44 UTC