>From an embedding standpoint, one feature that I find missing is the
ability to prevent user access to the hard drive. This feature is key
to the development of applications that allow browsing while blocking
out access to the operating system. Applications such as information
kiosks need this ability.
Some of this can be achieved by monitoring the URL loads and preventing
local URLs from being loaded.
Unfortunately, that's only half the battle, as there are times that
through a browser window, an nsFilePicker dialog can get raised. This
allows the user to peruse the file system and potentially gain access
to local files they otherwise can't see.
A common example of this is using a web mail site, such as HotMail, to
add an attachment to an outgoing email message.
In the short run, what do people think about adding a set of prefs like
"??????.??????.allowGetLocalFile", "??????.??????.allowPutLocalFile",
and "??????.??????.allowGetLocalDirectory". These would default to
true. If set to false, nsFilePicker::Show will return a value of
returnCancel immediately, instead of putting up a picker dialog.
A better long term solution, I think, is to add a way for an embeddor
to subvert the builtin nsFilePicker and substitute one of there own.
This would allow them to do their own filtering and/or access
restricting.
Thoughts?
--
-=- John
_____________________________________________________________________________
John Turnipseed | "If you had to identify, in one word, the reason
Mac Driver/Programmer | why the human race has not achieved, and never
[EMAIL PROTECTED] | will achieve, its full potential, that word
| would be: 'MEETINGS.'" -- Dave Barry
