4 ms·
In context of this issue, it's none of these. file:// scheme should not be accessible from http(s):// contexts.
by andrius4669 9y ago
In context of this issue, it's none of these.
file:// scheme should not be accessible from http(s):// contexts.
- deelowe 9y agoExactly. This is hardly an issue to get worked up about. The attack vector requires the user to download a file. HN has definitely hit it's eternal September given that so many people didn't know this.