Collected research
Filejacking: How to make a file server from your browser (with HTML5 of course)
WebKit's directory upload control lets a page read a whole folder, and users get no warning that a folder picker is not a save dialog. Kotowicz hid a transparent directory input over a fake download button, then opened a second window that survived the first being closed, uploaded the file listing and a sample image, and polled a control panel for further file requests.
Record
- Published by
- blog.kotowicz.net
- Topic
- Browser
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of blog.kotowicz.net, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .