Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The entire local file system api, for one: https://developer.mozilla.org/en-US/docs/Web/API/File_System... , which severely neuters any tooling designed to help you do real work on your own files.


Also a massive vulnerability surface letting arbitrary websites write whatever they want to your disk.


Definitely not. You have to explicitly select a directory from a native file system UI then confirm both read and write access for each directory, across each domain, typically each session. And system directories are blocked outright with no way to override.

This attitude is why people dismiss Firefox: “well if FF doesn’t implement it, it must be bad. Other browsers surely have glaring security holes”

(Source: I implemented the file system integration for vscode.dev)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: