James Ross wrote:

whether the code should be able to *read* the value is another question, but I suspect there is some long and silly history about allowing that

Maybe make it so that the page can only read the value if it was chosen via the filepicker?

--
Warning: May contain traces of nuts.
_______________________________________________
Mozilla-security mailing list
[email protected]
http://mail.mozilla.org/listinfo/mozilla-security

Reply via email to