Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Whats wrong with the operation of the INPUT TYPE=FILE element?

April 26, 2017element input operation type=file wrong

0

Posted

Whats wrong with the operation of the INPUT TYPE=FILE element?

1 Answer

0

Posted

By design, only the browser user should be able to enter text into the box that indicates the name of the file to upload. However, this vulnerability provides a way for a web application to bypass this restriction and put text of the web site operator’s choice into the field that specifies the file name. Once the form is submitted, whatever file is specified in the field – regardless of the means by the file name got there – would be uploaded.