Thanks Sergiu,

I agree this is absolutely a dangerous thing to do and should not be encouraged 
at all!

paul


Le 6 déc. 2012 à 10:27, Sergiu Dumitriu a écrit :

> On 12/06/2012 12:04 PM, Paul Libbrecht wrote:
>> Why is 
>>      $xwiki.getURLContent("file:///etc/...")
>> not supposed to work? (if you have programming rights).
> 
> Because the OP asked for files local to the user's computer, not the
> server. file:/// on the server will still point to the server.
> 
> The only thing that has access to the client machine is the browser. And
> browser makers try really hard to prevent web pages from having access
> to the user's disk.
> 
> Unless some LDAP tricks are used to link a user to a certain computer,
> and the XWiki server can have access to each user machine.
> 
>> paul
>> 
>> 
>> 
>> Le 6 déc. 2012 à 08:44, Sergiu Dumitriu a écrit :
>> 
>>> On 12/06/2012 11:39 AM, H.-Dirk Schmitt wrote:
>>>> Hi!
>>>> 
>>>> I'm looking for a receipt to display a local file inside an xwiki page.
>>>> 
>>>> The use case is that this is an intranet documentation provided by xwiki.
>>>> Every user in the audience has normally some configuration files in a
>>>> standardized location.
>>>> The content may differ between for each user (or concrete his
>>>> workstation). This is also the reason not to expose the files on a
>>>> webserver and use the RemoteCode marco.
>>>> 
>>>> Current solution is to at a link [[ConfigFile>>file:///etc.....]]
>>>> It would be nicer to display the content inside the xwiki page.
>>>> 
>>> 
>>> For security reasons, that kind of thing is not supposed to be doable.
>>> 
>>> Try using an iframe.
>>> 
>>> -- 
>>> Sergiu Dumitriu
>>> http://purl.org/net/sergiu/
> 
> 
> -- 
> Sergiu Dumitriu
> http://purl.org/net/sergiu
> _______________________________________________
> users mailing list
> users@xwiki.org
> http://lists.xwiki.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Reply via email to