MozillaZine

Javascript File i/o

Thursday May 25th, 2000

Pete Collins from Alphanumerica and Mozilla developers have created a Javascript interface for doing file i/o in Mozilla, which will allow new Mozilla components like Alphanumerica's Crash Recovery system to function properly.

Patterned after the PHP filesystem functions, simple functions such as file read/write and directory create are supported. The code has not yet made it into the nightly build, but they expect it will get in soon.

Note from AN: There seems to be a misconception about Javascript File I/O being a security risk. It is important to clarify that this project is not opening any security holes in Mozilla. There is a difference between Javascript on the Internet and Javascript inside the application. Javascript is used inside Mozilla to create the functionality for the application. This is in contrast to any Javascript downloaded from the Internet that is used for functionality only inside a Web page. This project does not grant any access to Javascript found on the Internet. For more information about how Javascript is used inside Mozilla read more about XPCOM and XPConnect.


#30 Paranoia???

by jedbro

Thursday May 25th, 2000 8:57 PM

You are replying to this message

I'm disapointed. I once though Mozilla/zine readers were a little bit smarter....

First off.. all you who have posted.. "this gives me the creeps".. "what about security"... etc. I have lost MAJOR respect for.

1.- Look who's coding this.. and what is it? a lousy-ass game? NO.. the next best thing that has happened to the internet. One of the toughest applications to write (a browser) is being written before our eyes. These guys are stupid, they are of the best programers out there and you think they would frick around and compromise our security. THEY ARE NOT STUPID.

2.- Netscape basically created the web a can receive full credit for javascript! And yet you doubt, and think they will not take security into consideration??

I feel you are loosing your faith people, lighten up.. if there is a problem, we have the code.. THIS IS NOT MICR*SOFT!!! =) (thank God)

Cheers