[pmwiki-users] Re: how does one encode "file:" link in a wiki page?

[chr at home.se]

On Wed, 2 Feb 2005, Neil Herber wrote:

> At 2005-02-03  03:43 AM +1300, Robin is rumored to have said:
> >On Wednesday 02 February 2005 05:19, Neil Herber wrote:
> > > The rule seems to be:
> > >          if I am on a web page, do not open local files
> > >          elseif I have opened a local file, do open other local files
> > > linked from it
> >Yes, it is for security reasons. It prevents things like checking for the
> >existence of local files that could be used to attack systems.
> 
> Robin
> 
> This makes no sense at all to me. If I am sitting at the keyboard of a 
> machine and I type in a valid file or directory reference, the browser 
> displays a directory listing or a file.

Maybe he means that the webpage you're viewing could contain a Java 
script, that could check for local files if file://-links were allowed?
(I'm just guessing here)

/C

-- 
Christian Ridderström, +46-8-768 39 44               http://www.md.kth.se/~chr