94634 - Path stripped from filename property

Status: VERIFIED DUPLICATE of bug 84029

(Core :: DOM: Core & HTML, defect)

Description

[Blake Ross]

User feedback:

 Netscape 6.1 Problem
 
Primary Browser: 	ntsc61  
Operating System: 	WinNT  
Language: 		English  
Issue Summary: 		HTML FORM enctype=multipart/form-data Content-Disposiont filename
has not path
Component: 		Navigator
Doing What: 		Other  Handling a form
Severity: 		SomethingDidNotWorkRight  
Can Reproduce: 		Always
Try this URL: 		http://www.idocs.com/tags/forms/_INPUT_TYPE_FILE.html
Issue Detail: 
In an html, add an upload file control by 
<FORM NAME="uploadForm" ACTION="xxx.cgi" 
METHOD="post" ENCTYPE="multipart/form-data>
File to upload:<INPUT TYPE="FILE" SIZE=30 
NAME="fileUpload">
</FORM>

The file received from the server side, in 
Content-Dispostion, has filename, but does not 
include a path, such as "c:\abc.txt" will be seen 
by the server as "abc.txt". 

Try it with the above URL (tutorial webpage) with 
Netscape 6 and 6.1, both version truncated the 
file path.

Comment 1

[Eric Pollmann]

This is an intentional security feature.  See bug 84029.  You wouldn't really
want someone to know the path to your file anyway, would you?  :)

*** This bug has been marked as a duplicate of 84029 ***

Comment 2

[Vladimir Ermakov]

verifying