I would hope not, becase if it did, sites could submit (from hidden frames) any file on YOUR computer that it wanted. <shiver> That's scary!
-- James Mitchell Web Developer/Struts Evangelist http://jakarta.apache.org/struts/ > -----Original Message----- > From: David Graham [mailto:[EMAIL PROTECTED] > Sent: Friday, February 28, 2003 2:43 PM > To: [EMAIL PROTECTED] > Subject: RE: Should html:file tag have a value attribute? > > > I don't know. > > David > > > > >From: "James Mitchell" <[EMAIL PROTECTED]> > >Reply-To: "Struts Developers List" <[EMAIL PROTECTED]> > >To: "'Struts Developers List'" <[EMAIL PROTECTED]> > >Subject: RE: Should html:file tag have a value attribute? > >Date: Fri, 28 Feb 2003 14:21:36 -0500 > > > >Does it submit the file if you just hit submit? > > > > > > > >-- > >James Mitchell > >Web Developer/Struts Evangelist > >http://jakarta.apache.org/struts/ > > > > > > > > > -----Original Message----- > > > From: David Graham [mailto:[EMAIL PROTECTED] > > > Sent: Friday, February 28, 2003 2:19 PM > > > To: [EMAIL PROTECTED] > > > Subject: RE: Should html:file tag have a value attribute? > > > > > > > > > Opera does display the value attribute's text in the > browser window; > > > however, when you open the file chooser on the field, that > > > value is not used > > > at all. > > > > > > David > > > > > > > > > > > > >From: "Karr, David" <[EMAIL PROTECTED]> > > > >Reply-To: "Struts Developers List" > <[EMAIL PROTECTED]> > > > >To: "Struts Developers List" <[EMAIL PROTECTED]> > > > >Subject: RE: Should html:file tag have a value attribute? > > > >Date: Fri, 28 Feb 2003 10:58:10 -0800 > > > > > > > >There's definitely a C&P error in the doc. The HTML > > > specification says > > > >that the value of the "value" attribute MAY be used as the > > > default file > > > >name presented in the FileChooser. My favorite web site for > > > >interpreting the spec, HTMLHelp, says that most browsers > ignore this > > > >value for security reasons. I wonder what Opera does with this? > > > > > > > >Based on this, I would say we should correct the doc for the > > > attribute, > > > >but not remove it. > > > > > > > > > -----Original Message----- > > > > > From: James Mitchell [mailto:[EMAIL PROTECTED] > > > > > Sent: Friday, February 28, 2003 10:53 AM > > > > > To: 'Struts Developers List' > > > > > Subject: RE: Should html:file tag have a value attribute? > > > > > > > > > > I'm setting up Cactus tests for that tag and while > Struts will put > > > > > value="Some Value" if you specify it, it is > completely ignored by > > > > > Mozilla and IE. > > > > > > > > > > I am assuming that it was just a copy and paste error > > > since our docs > > > > > state..."Value of the label to be placed on this button. > > > This value > > > >will > > > > > also be submitted as the value of the specified > request parameter. > > > >[Body > > > > > of this tag (if any), or "Cancel"] (RT EXPR)". Notice > > > that it says > > > > > 'button' and since it matches > > > > > > > > > > I realize that "Cancel" was probably a copy and paste error > > > > > (html:password has it as well). I think we need to > remove it or > > > > > document it better. > > > > > > > > > > Your thoughts? > > > > > > > > > > > > > > > -- > > > > > James Mitchell > > > > > Web Developer/Struts Evangelist > > > > > http://jakarta.apache.org/struts/ > > > > > > > > > > > > > > > > > > > > > -----Original Message----- > > > > > > From: Karr, David [mailto:[EMAIL PROTECTED] > > > > > > Sent: Friday, February 28, 2003 12:51 PM > > > > > > To: Struts Developers List > > > > > > Subject: RE: Should html:file tag have a value attribute? > > > > > > > > > > > > > > > > > > Say what? What makes you think it's ignored? It > > > doesn't appear to > > > >be > > > > > > ignored in Struts (handled in > > > BaseFieldTag.doStartTag()). The HTML > > > > > > specification describes it, although another source > > > > > > (HTMLHelp) says that > > > > > > "most browsers" ignore it for security reasons. > > > > > > > > > > > > > -----Original Message----- > > > > > > > From: James Mitchell [mailto:[EMAIL PROTECTED] > > > > > > > Sent: Friday, February 28, 2003 9:36 AM > > > > > > > To: Struts Developers List > > > > > > > Subject: Should html:file tag have a value attribute? > > > > > > > > > > > > > > > > > > > > > Setting a value for html:file is ignored. (or is it > > > an error in > > > >the > > > > > > > spec???) > > > > > > > > > > > > > > I wanted to bounce this off someone before I remove > > > it from the > > > >xml > > > > > > > file. > > > > > > > > > > > > > > > > >--------------------------------------------------------------------- > > > > > > To unsubscribe, e-mail: > > > [EMAIL PROTECTED] > > > > > > For additional commands, e-mail: > > > [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > > > To unsubscribe, e-mail: > [EMAIL PROTECTED] > > > > > For additional commands, e-mail: > > > [EMAIL PROTECTED] > > > > > > > > > > > > >--------------------------------------------------------------------- > > > >To unsubscribe, e-mail: [EMAIL PROTECTED] > > > >For additional commands, e-mail: > [EMAIL PROTECTED] > > > > > > > > > _________________________________________________________________ > > > MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. > > > http://join.msn.com/?page=features/virus > > > > > > > > > > --------------------------------------------------------------------- > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > For additional commands, e-mail: > [EMAIL PROTECTED] > > > > > > > > >--------------------------------------------------------------------- > >To unsubscribe, e-mail: [EMAIL PROTECTED] > >For additional commands, e-mail: [EMAIL PROTECTED] > > > _________________________________________________________________ > The new MSN 8: advanced junk mail protection and 2 months FREE* > http://join.msn.com/?page=features/junkmail > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
