[Webkit-unassigned] [Bug 14765] Allow loading file://localhost/ resources from pages loaded with special://localhost/ URL

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=14765





------- Comment #2 from rush at manbert.com  2007-07-26 17:55 PDT -------
(In reply to comment #1)
> In general, what you're reporting is intended behavior for security purposes.
> 
> To compliment its new, strict security, WebKit for Safari 3 has new API for
> registering a custom URL protocol such that it is treated like file:///:
> 
> @interface WebView
> + (void)registerURLSchemeAsLocal:(NSString *)scheme;
> @end
>

Ah, that makes things work much better. Now I can load local resources to my
heart's content. Looks like this one can be resolved, at least as far as I am
concerned. 

> > Strangely enough, local file:// image resources can be loaded, as can CSS style sheets.
> 
> This is a security bug. If you have an example of this, please file it.
> 

Please see #14772 (http://bugs.webkit.org/show_bug.cgi?id=14772)


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.