Comment by mprime1
4 years ago
Brave and Safari that I know of.
i.e. if you run the creator with a simple HTTP server on localhost:8080 it'll block the fetch to localhost:8080/foo
4 years ago
Brave and Safari that I know of.
i.e. if you run the creator with a simple HTTP server on localhost:8080 it'll block the fetch to localhost:8080/foo
for local files as well?
Yes.
If that wasn't the case, then "HTML virus" would be a thing: I send you an HTML file and, if you open it, it read files from your hard drive and uploads them to my server.
I should have clarified - I mean I was wondering if any browsers block fetch to remote URLs from local files
I do vaguely recall encountering some problem I didn't expect when I was making a tool contained in a local html file, but I dont remember which browser I was using at the time
The problem with your scenario is the reading the local files without permission, not the use of the crypto API.
3 replies →