Links

Lists

Latest Updates

Ruby On Rails List
Python list
Advanced Java
The JavaScript List
Apache Users
Full Disclosure
Linux Security

Search the archives!


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Javascript] Please confirm my doubts


  • From: javascript@xxxxxxxxxx (Victor Papp)
  • Subject: [Javascript] Please confirm my doubts
  • Date: Tue, 31 Jul 2001 20:48:13 +0200

This is a multi-part message in MIME format.

------=_NextPart_000_014C_01C11A02.1DDC5400
Content-Type: text/plain;
	charset="windows-1251"
Content-Transfer-Encoding: quoted-printable

  ----- Original Message -----=20
  From: Cutter Bl=20
  To: javascript@xxxxxxxxxx=20
  Sent: Tuesday, July 31, 2001 2:10 PM
  Subject: Re: [Javascript] Please confirm my doubts


  It's true, javascript does not give access to a user's file system.
  Cutter


  True, if we are talking client-side scripting. So, the javascript is =
in the html page, downloaded by the visitor, this script cannot access =
the file system OF THE VISITOR. However, if we are talking server-side =
scripting here, where the script is executed on the server, and the =
result is being sent to the visitor, the NOT TRUE. In this case, you =
have access to the file system (according to your access rights).



  Hope this helps.

  Victor Papp


------=_NextPart_000_014C_01C11A02.1DDC5400
Content-Type: text/html;
	charset="windows-1251"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Dwindows-1251" =
http-equiv=3DContent-Type>
<META content=3D"MSHTML 5.00.2920.0" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<BLOCKQUOTE=20
style=3D"BORDER-LEFT: #000000 2px solid; MARGIN-LEFT: 5px; MARGIN-RIGHT: =
0px; PADDING-LEFT: 5px; PADDING-RIGHT: 0px">
  <DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
  <DIV=20
  style=3D"BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: =
black"><B>From:</B>=20
  <A href=3D"mailto:cutterbl@xxxxxxxxxxx"; =
title=3Dcutterbl@xxxxxxxxxxx>Cutter Bl</A>=20
  </DIV>
  <DIV style=3D"FONT: 10pt arial"><B>To:</B> <A=20
  href=3D"mailto:javascript@xxxxxxxxxx"=20
  title=3Djavascript@xxxxxxxxxx>javascript@xxxxxxxxxx</A> </DIV>
  <DIV style=3D"FONT: 10pt arial"><B>Sent:</B> Tuesday, July 31, 2001 =
2:10=20
PM</DIV>
  <DIV style=3D"FONT: 10pt arial"><B>Subject:</B> Re: [Javascript] =
Please confirm=20
  my doubts</DIV>
  <DIV><BR></DIV>
  <DIV>
  <DIV>
  <P>It's true, javascript does not give access to a user's file=20
  system.<BR>Cutter<BR></P>
  <P><FONT face=3D"Arial CYR" size=3D2>True, if we are talking =
client-side=20
  scripting. So, the javascript is in the html page, downloaded by the =
visitor,=20
  this script cannot access the file system OF THE VISITOR. However, if =
we are=20
  talking server-side scripting here, where the script is executed on =
the=20
  server, and the result is being sent to the visitor, the NOT TRUE. In =
this=20
  case, you have access to the file system (according to your access=20
  rights).</FONT></P>
  <P>&nbsp;</P>
  <P><FONT face=3D"Arial CYR" size=3D2>Hope this helps.</FONT></P>
  <P><FONT face=3D"Arial CYR" size=3D2>Victor=20
Papp</FONT></P></DIV></DIV></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_014C_01C11A02.1DDC5400--