James Ross wrote:
whether the code should be able to *read* the value is another question, but I suspect there is some long and silly history about allowing that
Maybe make it so that the page can only read the value if it was chosen via the filepicker?
-- Warning: May contain traces of nuts. _______________________________________________ Mozilla-security mailing list Mozilla-security@mozilla.org http://mail.mozilla.org/listinfo/mozilla-security