HTML5 Tracker

Short URL: http://html5.org/r/3863

Index: source
===================================================================
--- source	(revision 3862)
+++ source	(revision 3863)
@@ -37984,6 +37984,46 @@
 
   </div>
 
+  <div class="example">
+
+   <p>For historical reasons, the <code
+   title="dom-input-value">value</code> IDL attribute prefixes the
+   filename with the string "<code title="">C:\fakepath\</code>". Some
+   legacy user agents actually included the full path (which was a
+   security vulnerability). As a result of this, obtaining the
+   filename from the <code title="dom-input-value">value</code> IDL
+   attribute in a backwards-compatible way is non-trivial. The
+   following function extracts the filename in a suitably compatible
+   manner:</p>
+
+   <pre>function extractFilename(path) {<!--
+  if (path.substr(0, 12) == "C:\\fakepath\\")
+    return path.substr(12);-->
+  var x;
+  x = path.lastIndexOf('\\');
+  if (x >= 0) // Windows-based path
+    return path.substr(x+1);
+  x = path.lastIndexOf('/');
+  if (x >= 0) // Unix-based path
+    return path.substr(x+1);
+  return path; // just the filename
+}</pre>
+
+   <p>This can be used as follows:</p>
+
+   <pre>&lt;p>&lt;input type=file name=image onchange="updateFilename(this.value)">&lt;/p>
+&lt;p>The name of the file you picked is: &lt;span id="filename">(none)&lt;/span>&lt;/p>
+&lt;script>
+ function updateFilename(path) {
+   var name = extractFilename(path);
+   document.getElementById('filename').textContent = name;
+ }
+&lt;/script></pre>
+
+   <!-- How useful this actually is... is unclear. -->
+
+  </div>
+
   <hr>
 
   <div class="bookkeeping impl">

Previous | Next