WEIGHT-10 Re: [Javascript] xmlhttprequest

[Mike Dougherty]

Maybe I didn't read closely enough - i thought we were talking about a ServerX delivering a page 
with javascript trying to access localhost data.  That would be a cross-domain security problem 
anyway...

On Fri, 11 Feb 2005 18:09:48 -0200
  Flavio Gomes <flavio at economisa.com.br> wrote:
>IE sucks.
>
> Did I say it? No .. I must have just tought it..yeah.. sure.. but it 
>does sucks..
>
>
>(Ps.: It was just a joke, ok people?)
>
>
>Peter Brunone wrote:
>
>>
>>    That doesn't quite make sense.  If MS blocked web developers from 
>> accessing files on the local web server, then you could never develop 
>> on the web server box; you would *always* need two machines for 
>> development.
>>
>>    The security concern is with the local filesystem as you mentioned, 
>> but this has nothing to do with files called through a web server.
>>
>>    It does sound like there might be a security issue, but that would 
>> be more of a "zone" configuration problem.
>>
>> Cheers,
>>
>> Peter
>> *
>> From*: "Mike Dougherty" mdougherty at pbp.com <mailto:mdougherty at pbp.com>
>>
>> I believe that's MS's answer to the security vulnerability where the 
>> evil javascript developer
>> tries to read the local filesystem to do nasty things. So you may be 
>> fighting an IE security
>> update.
>>
>> Good luck...
>>
>> On Fri, 11 Feb 2005 18:24:40 +0100
>> Iztok Polanic wrote:
>> >Hi!
>> >
>> >I'm playing a bit with XMLhttpRequest. I found out, that if the file 
>> in on local web server
>> >(localhost) then IE throws an error (-107....) Does anybody have a 
>> clue how to solve this?
>> >Mozilla works fine :)
>> >
>> >--
>> >Bye,
>> >
>> >Iztok
>>
>>------------------------------------------------------------------------
>>
>>_______________________________________________
>>Javascript mailing list
>>Javascript at LaTech.edu
>>https://lists.LaTech.edu/mailman/listinfo/javascript
>>  
>>
>
>_______________________________________________
>Javascript mailing list
>Javascript at LaTech.edu
>https://lists.LaTech.edu/mailman/listinfo/javascript
>
>
>
>__________________________________________________________
>This message was scanned by ATX
>3:10:56 PM ET - 2/11/2005