Re:Firefox 111.0 enabled Origin private file system access
by nine_k on Wednesday March 15, 2023 @10:19AM
(#35168686)
This is not access to the filesystem.
This is access to some controlled contents that happen to come from the filesystem, with interaction explicitly initiated by the user every time. It gives the browser no access to the structure of the filesystem, no way to navigate it, and crucially no way to transparently read or write anything.
This is good isolation, I'd prefer it to be this way. OFS also gives equally good isolation, I'm fine with that.
Sharing between OFS and the rest of the user's file system should be possible, but only explicitly, a la iOS, Android, and the file upload / download dialog.
Re:Firefox 111.0 enabled Origin private file system access
by cxr on Wednesday March 15, 2023 @10:35AM
(#35168904)
* * *
Re:Firefox 111.0 enabled Origin private file system access
by nine_k on Wednesday March 15, 2023 @11:10AM
(#35169515)
Please take another look at the comment I was replying to. It was about <input type="file"> and <a> with disposition attribute, which are not filesystem access.
While Google's new API definitely is.
As for writing, you don't get unlimited unchecked writes the way that Chrome's proposed Filesystem Access API grants you, but you can trigger "checked" writes (that show a file save dialog) using `<a/>` elements with the `download` attribute. This is arguably a better user experience, because it keeps the user in the loop, allowing them to veto (or rename) the written file at a fine-grained level—which will be difficult or impossible to do if the Chrome team's proposed API because standard.
Overall, the File System Access proposal is a bad one that favors authors over users, and I hope it doesn't become either a de facto or a de jure fixture of the Web platform soon. Here's to hoping for a future post to the Chrome Developers blog announcing that support for yet another experimental API of theirs will be sunset in some future release.