3 ms·

> When I run 'notepad dir1/file1.txt', the package should not sneakily be able to access dir2. What happens if the user presses ^O, expecting a file open dialo

> When I run 'notepad dir1/file1.txt', the package should not sneakily be able to access dir2. What happens if the user presses ^O, expecting a file open dialog that could navigate to other directories? Would the dialog be somehow integrated to the OS and run with higher permissions, and then notepad is given permissions to the other directory that the user selects?

what 8mo ago
Pretty sure that’s how it works on iOS. The app can only access its own sandboxed directory. If it wants anything else, it has to use a system provided file picker that provides a security scoped url for the selected file.
- signal11 8mo ago
  Yes, UIDocumentPickerViewController is 10+ years old at this point. There’s also a similar photos picker (PHPicker) which is especially good from 2023 on. Signal uses this for instance.
- int_19h 8mo ago
  It's also how it works on macOS and even on modern Windows if you are running sandboxed apps.
- bombolo 8mo ago
  [dead]