[Webkit-unassigned] [Bug 14765] Allow loading file://localhost/ resources from pages loaded with special://localhost/ URL

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=14765





------- Comment #1 from ggaren at apple.com  2007-07-25 22:31 PDT -------
In general, what you're reporting is intended behavior for security purposes.

To compliment its new, strict security, WebKit for Safari 3 has new API for
registering a custom URL protocol such that it is treated like file:///:

@interface WebView
+ (void)registerURLSchemeAsLocal:(NSString *)scheme;
@end

> Strangely enough, local file:// image resources can be loaded, as can CSS style sheets.

This is a security bug. If you have an example of this, please file it.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.