Live data from Hacker News

The Native File System API allows web apps to save directly to files

web.dev

1–10 of 155 posts

Re: The Native File System API allows web apps to save directly to files

#3

As much as they try to add security to this feature it inherently breaks out of the "sandbox" concept of the browser and scares me.

nowadays' security is that you have to manually grant permission, which for most people, esp non-technical people, they will normally just press Y, so yeah, the default sandbox protection will be gone for most people.

Re: The Native File System API allows web apps to save directly to files

#6

Finally, we can have a local markdown editor with live preview. I just hope it can read files and folders in a particular directory as well, with permission of course.

Not sure why you would say that. Maybe try some vscode extensions such as "Markdown Preview Enhanced" or "Markdown All In One"? Those works both offline and local.

Re: The Native File System API allows web apps to save directly to files

#7
There is no way this isn't going to open up massive security holes. Even if the browser puts up alert after alert, people are just going to randomly click buttons and then all of a sudden wonder why some random web app is deleting all their files and adding malware. And the spec docs aren't exactly reassuring. This is an exact quote! "This API could be used by websites to try to store and/or execute malware on the users system."

Re: The Native File System API allows web apps to save directly to files

#8

There is no way this isn't going to open up massive security holes. Even if the browser puts up alert after alert, people are just going to randomly click buttons and then all of a sudden wonder why some random web app is deleting all their files and adding malware. And the spec docs aren't exactly reassuring. This is an exact quote! "This API could be used by websites to try to store and/or execute malware on the us…

It won't work on iPhones, which means no one will use it, I hope.

Re: The Native File System API allows web apps to save directly to files

#9
post #8

There is no way this isn't going to open up massive security holes. Even if the browser puts up alert after alert, people are just going to randomly click buttons and then all of a sudden wonder why some random web app is deleting all their files and adding malware. And the spec docs aren't exactly reassuring. This is an exact quote! "This API could be used by websites to try to store and/or execute malware on the us…

It won't work on iPhones, which means no one will use it, I hope.

[deleted]

Re: The Native File System API allows web apps to save directly to files

#10
post #5

Every time Chrome adds a new API it is nearly always abused by ad networks and tracking companies to fingerprint users. If you're bored one day you should consider reverse engineering some ad network code. You'll be stunned at the insidious practices used.

That sounds like a lot of fun. Do you have a good file to start with? Does Google deliver a payload to fingerprint browsers on page they serve ads to?
Post reply on HN