Links

Lists

Latest Updates

Ruby On Rails List
Python list
Advanced Java
The JavaScript List
Apache Users
Full Disclosure
Linux Security

Search the archives!


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Javascript] Please confirm my doubts


  • From: javascript@xxxxxxxxxx (TomMallard)
  • Subject: [Javascript] Please confirm my doubts
  • Date: Tue, 31 Jul 2001 09:12:42 -0700

An activex or applet object which is registered on the server can then be
downloaded to a client along with the page to access files. The user must
approve the object download.

Normally you wouldn't use the scripting host for this as the VB or java code
has similar file system objects to use and the compiled object is less open
to security hacks.

tom mallard
seattle
----- Original Message -----
From: "Rodney Myers" <rodney@xxxxxxxxxxxxxxxx>
To: <javascript@xxxxxxxxxx>
Sent: Tuesday, July 31, 2001 6:08 AM
Subject: Re: [Javascript] Please confirm my doubts


> True, in itself.
>
> But in IE and Windows with WSH on files can be accessed and read and
> written using FileSystemObject a MS Active-X object.
>
> Before going this route you would have to ask yourself (at least) the
> following questions:
>
> 1) is the project going to be viable using only Windows systems with
> MSIE browsers?
> 2) can the project support users who have not fgot WSH enabled?
> 3) do the additional security risks from worms etc through having WSH on
> bother us?
>
> Here is a "hello world" type script :
>
>
> <html><head>
> <title></title>
> <script language="JavaScript">
> <!--
> var fso, f1;
> fso = new ActiveXObject("Scripting.FileSystemObject");
> // Get a File object to query.
> f1 = fso.GetFile("c:\\sig.txt");
> //--end-->
> </script>
> </head>
> <body text='#000000' bgcolor='#ffffff'>
> <script language="JavaScript">
> <!--
> // Print information.
> document.write("File last modified: " + f1.DateLastModified);
>
> //--end-->
> </script>
>
> </body></html>
>
>
> Andrew Dunn wrote:
>
> > Hi,    I'm wondering if anyone can confirm my doubts that JavaScript
> > does not have access to files on a computer. ie. If I had three
> > folders on a computer javascript could not read their names or the
> > files in them dynamically (if the files changed)?Andrew
>
> --
> Shop@ssistant Add-ons and Developer Workshops
> http://www.aflyingstart.net/addons/
>
> Enquiries regarding Shop@ssistant Classic training :
> Call 01256 880770
>
> Rodney Myers
> Based in Oxford, England
> Technical Director, Shop@ssistant eCommerce Solutions
>
>
> _______________________________________________
> Javascript mailing list
> Javascript@xxxxxxxxxx
> http://www.LaTech.edu/mailman/listinfo/javascript
>