Reviewed by John, Ken, Dave.
authormjs <mjs@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 20 Jan 2004 00:58:24 +0000 (00:58 +0000)
committermjs <mjs@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 20 Jan 2004 00:58:24 +0000 (00:58 +0000)
commitf70d9da68bc3ca9d04a03ed7d0090398a2ed2b90
tree8f7280d228c3a1c8fd4dae950fa428142f384973
parent2fcf15740efecf19a1d48892f6785dd75662f87d
    Reviewed by John, Ken, Dave.

<rdar://problem/3533319>: Safari allows upload of arbitrary local files w/o user's knowledge or permission

* khtml/html/html_formimpl.cpp:
        (HTMLInputElementImpl::value): Don't fall back to the value
attribute for file inputs, since that way malicious HTML could
force the user to upload files unexpectedly.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@5929 268f45cc-cd09-0410-ab3c-d52691b4dbfc
WebCore/ChangeLog-2005-08-23
WebCore/khtml/html/html_formimpl.cpp