MozillaZine

Javascript File i/o

Thursday May 25th, 2000

Pete Collins from Alphanumerica and Mozilla developers have created a Javascript interface for doing file i/o in Mozilla, which will allow new Mozilla components like Alphanumerica's Crash Recovery system to function properly.

Patterned after the PHP filesystem functions, simple functions such as file read/write and directory create are supported. The code has not yet made it into the nightly build, but they expect it will get in soon.

Note from AN: There seems to be a misconception about Javascript File I/O being a security risk. It is important to clarify that this project is not opening any security holes in Mozilla. There is a difference between Javascript on the Internet and Javascript inside the application. Javascript is used inside Mozilla to create the functionality for the application. This is in contrast to any Javascript downloaded from the Internet that is used for functionality only inside a Web page. This project does not grant any access to Javascript found on the Internet. For more information about how Javascript is used inside Mozilla read more about XPCOM and XPConnect.


#17 Still a few questions from me (suprise suprise)

by SomeSmartAss

Thursday May 25th, 2000 3:06 PM

You are replying to this message

First off, I'm pretty sure Skins can contain JavaScript (especially for custom button functionality)

Second, I am aware that installing a skin will require a certain level of user intervention, I would be shocked to find out otherwise. (in fact, I argued pretty vehimently against NOT warning the user of UI changes)

My contention here, is whether this skin will further warn me that it is doing File I/O calls or not. The concept of a skin (at least to me) is mostly to make my browser look pretty (or at least different); that concept doesn't include the ability to create, modify & destroy files on my hard-drive after the initial install.

Yes, I understand that XUL, and XPConnect, allow for more than just skinnability, and I'm not contesting the fact that improved FIle I/O will even further extend the possibility of app creation through Mozilla. I just want to be told that its doing File I/O.

The assumtion that that just because the user installed a "skin", they should blindly allow it acces to there local system.