File upload keeps handle on local user file.
Reported by
nicksen...@gmail.com,
Jul 28 2017
|
||
Issue descriptionUserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36 Steps to reproduce the problem: 1. Upload file (using the browse button provided by input type=file. 2. Don't actually upload the file. Leave it as it is in the browser. 3. Read .files on that element. You can see the file size. (Or use a new FileReader to read the file's data.) 4. Update the file on the client machine (outside of the browser.) 5. Read .files on the element (or use a file reader.) The data is updated. What is the expected behavior? I would not expect that the file uploaded has the same data as when it is changed on the user's disk. What went wrong? Originally I thought this could be a nice feature for an app that I am writing but I found that Internet Explorer and Firefox had different behaviors. Only Chrome actually allowed the updated text to be read again without a re-upload. Did this work before? N/A Chrome version: 59.0.3071.115 Channel: stable OS Version: 10.0 Flash Version: Is this intended behavior or is it a potential security bug?
,
Aug 1 2017
I think this is by design, and not a security issue. |
||
►
Sign in to add a comment |
||
Comment 1 by dtapu...@chromium.org
, Jul 31 2017