Links

Lists

Latest Updates

Ruby On Rails List
Python list
Advanced Java
The JavaScript List
Apache Users
Full Disclosure
Linux Security

Search the archives!
Having a development problem? Ask eDevelopment.org forums!

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Javascript] Please confirm my doubts

  • From: javascript@xxxxxxxxxx (Ben Curtis)
  • Subject: [Javascript] Please confirm my doubts
  • Date: Tue, 31 Jul 2001 09:40:04 -0700
> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--MS_Mac_OE_3079417204_517822_MIME_Part
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit


    I'm wondering if anyone can confirm my doubts that JavaScript does not
have access to files on a computer. ie. If I had three folders on a computer
javascript could not read their names or the files in them dynamically (if
the files changed)?

Javascript can load local files into a page for read-only if you already
know the location and name, but can only interpret them as Javascript, HTML,
or CSS. JS does not have access to the file system controls, like the
ability to change a name or red a list of names. But, the usual
can't-access-info-from-another-server security model applies anyway, so a
script on your page cannot read the values of whatever it loaded up (at
least, now that Microsoft plugged *that* gaping hole scripts can't!).

To do what you are talking about is not possible so far as I know. I believe
you can do this with signed scripts (blech), or by giving permission to a
Java applet to venture outside its sandbox.

--
+Ben Curtis

"Most people use statistics the way a drunkard uses a lamp post,
more for support than illumination."







--MS_Mac_OE_3079417204_517822_MIME_Part
Content-type: text/html; charset="US-ASCII"
Content-transfer-encoding: quoted-printable

<HTML>
<HEAD>
<TITLE>Re: [Javascript] Please confirm my doubts</TITLE>
</HEAD>
<BODY>
<BLOCKQUOTE><BR>
<FONT COLOR=3D"#0000FF"><FONT SIZE=3D"2"><FONT FACE=3D"Arial"> &nbsp;&nbsp;&nbsp;=
I'm wondering if anyone can confirm my doubts that JavaScript does not have =
access to files on a computer. ie. If I had three folders on a computer java=
script could not read their names or the files in them dynamically (if the f=
iles changed)?<BR>
</FONT></FONT></FONT></BLOCKQUOTE><BR>
Javascript can load local files into a page for read-only if you already kn=
ow the location and name, but can only interpret them as Javascript, HTML, o=
r CSS. JS does not have access to the file system controls, like the ability=
 to change a name or red a list of names. But, the usual can't-access-info-f=
rom-another-server security model applies anyway, so a script on your page c=
annot read the values of whatever it loaded up (at least, now that Microsoft=
 plugged *that* gaping hole scripts can't!).<BR>
<BR>
To do what you are talking about is not possible so far as I know. I believ=
e you can do this with signed scripts (blech), or by giving permission to a =
Java applet to venture outside its sandbox.<BR>
<BR>
--<BR>
+Ben Curtis<BR>
<BR>
&quot;Most people use statistics the way a drunkard uses a lamp post,<BR>
more for support than illumination.&quot;<BR>
<BR>
<BR>
<BR>
<BR>
<BR>
</BODY>
</HTML>


--MS_Mac_OE_3079417204_517822_MIME_Part--