[Webkit-unassigned] [Bug 14765] Allow loading file://localhost/ resources from pages loaded with special://localhost/ URL

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Jul 25 22:31:13 PDT 2007


------- Comment #1 from ggaren at apple.com  2007-07-25 22:31 PDT -------
In general, what you're reporting is intended behavior for security purposes.

To compliment its new, strict security, WebKit for Safari 3 has new API for
registering a custom URL protocol such that it is treated like file:///:

@interface WebView
+ (void)registerURLSchemeAsLocal:(NSString *)scheme;

> Strangely enough, local file:// image resources can be loaded, as can CSS style sheets.

This is a security bug. If you have an example of this, please file it.

Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

More information about the webkit-unassigned mailing list