Live data from Hacker News

The Native File System API allows web apps to save directly to files

web.dev

11–20 of 155 posts

Re: The Native File System API allows web apps to save directly to files

#11

There is no way this isn't going to open up massive security holes. Even if the browser puts up alert after alert, people are just going to randomly click buttons and then all of a sudden wonder why some random web app is deleting all their files and adding malware. And the spec docs aren't exactly reassuring. This is an exact quote! "This API could be used by websites to try to store and/or execute malware on the us…

Seems like it can be disabled in flags for now, which I just went in and did. That flag is bound to disappear at some point though… might become necessary to wrap browsers in an isolating sandbox or VM just to be sure they can't touch things they're not supposed to.

Re: The Native File System API allows web apps to save directly to files

#12
post #6

Finally, we can have a local markdown editor with live preview. I just hope it can read files and folders in a particular directory as well, with permission of course.

Not sure why you would say that. Maybe try some vscode extensions such as "Markdown Preview Enhanced" or "Markdown All In One"? Those works both offline and local.

The main selling point would be if it works on my mobile. Vscode in its current form with plugins doesn't.

Re: The Native File System API allows web apps to save directly to files

#13

There is no way this isn't going to open up massive security holes. Even if the browser puts up alert after alert, people are just going to randomly click buttons and then all of a sudden wonder why some random web app is deleting all their files and adding malware. And the spec docs aren't exactly reassuring. This is an exact quote! "This API could be used by websites to try to store and/or execute malware on the us…

Do we need to just create a dummy proof OS for people that are oblivious and click yes to everything? Otherwise, why not give people choice? I mean you could create a pop up asking people for their passwords today on any browser, so how is adding a feature that requires permission any different?

Re: The Native File System API allows web apps to save directly to files

#14
post #5

Every time Chrome adds a new API it is nearly always abused by ad networks and tracking companies to fingerprint users. If you're bored one day you should consider reverse engineering some ad network code. You'll be stunned at the insidious practices used.

That sounds like a lot of fun. Do you have a good file to start with? Does Google deliver a payload to fingerprint browsers on page they serve ads to?

Google routinely allows third parties to run egregious malicious fingerprinting scripts without consequence, most notably on StackOverflow. [1]

[1] https://meta.stackexchange.com/questions/331960/why-is-stack...

Re: The Native File System API allows web apps to save directly to files

#15
post #6

Finally, we can have a local markdown editor with live preview. I just hope it can read files and folders in a particular directory as well, with permission of course.

Not sure why you would say that. Maybe try some vscode extensions such as "Markdown Preview Enhanced" or "Markdown All In One"? Those works both offline and local.

VS Code sucks and if I were to go the route of a different app there are lot better options out there for markdown editing. This feature has a lot of amazing potential, but some people like the Apple-model so much that they'd prefer only being told what they are allowed to do.

Re: The Native File System API allows web apps to save directly to files

#16

There is no way this isn't going to open up massive security holes. Even if the browser puts up alert after alert, people are just going to randomly click buttons and then all of a sudden wonder why some random web app is deleting all their files and adding malware. And the spec docs aren't exactly reassuring. This is an exact quote! "This API could be used by websites to try to store and/or execute malware on the us…

Seems like it can be disabled in flags for now, which I just went in and did. That flag is bound to disappear at some point though… might become necessary to wrap browsers in an isolating sandbox or VM just to be sure they can't touch things they're not supposed to.

chrome://flags/#native-file-system-api

I already had it disabled before LOL

Re: The Native File System API allows web apps to save directly to files

#18
post #6

Earlier quoted context omitted.

Not sure why you would say that. Maybe try some vscode extensions such as "Markdown Preview Enhanced" or "Markdown All In One"? Those works both offline and local.

The main selling point would be if it works on my mobile. Vscode in its current form with plugins doesn't.

Why would you want to edit code on your mobile locally?

I set up my phone to code recently and the first thing I did was set up my editor to connect to a remote server.

Editing local files seems counter productive since you would think you would be doing most of your development not on a phone.

Re: The Native File System API allows web apps to save directly to files

#19

There is no way this isn't going to open up massive security holes. Even if the browser puts up alert after alert, people are just going to randomly click buttons and then all of a sudden wonder why some random web app is deleting all their files and adding malware. And the spec docs aren't exactly reassuring. This is an exact quote! "This API could be used by websites to try to store and/or execute malware on the us…

[deleted]

Re: The Native File System API allows web apps to save directly to files

#20
post #6

Earlier quoted context omitted.

Not sure why you would say that. Maybe try some vscode extensions such as "Markdown Preview Enhanced" or "Markdown All In One"? Those works both offline and local.

VS Code sucks and if I were to go the route of a different app there are lot better options out there for markdown editing. This feature has a lot of amazing potential, but some people like the Apple-model so much that they'd prefer only being told what they are allowed to do.

As a counter opinion I would posit that VS Code is probably the most well written piece of widely-used software written in the last decade.

If you don't like the editing options, you've either not tried all the various plugins options available or you are too lazy or not interested enough to make your own.

Post reply on HN