James Ross wrote:

whether the code should be able to *read* the value is another question, but I suspect there is some long and silly history about allowing that

Maybe make it so that the page can only read the value if it was chosen via the filepicker?

--
Warning: May contain traces of nuts.
_______________________________________________
Mozilla-security mailing list
Mozilla-security@mozilla.org
http://mail.mozilla.org/listinfo/mozilla-security

Reply via email to