On Sun, 31 Mar 2024 12:51:52 +0300 Antti-Pekka Johannes Känsälä wrote:
https://lists.debian.org/debian-user/2024/03/msg00721.html
Notice that this thread is broken into many part. (Perhaps because gmail
does not support In-Reply-To in mailto: links)
I am worried Gmail in a Firefox tab is able to break out of Firefox
somehow, gaining unauthorized access to 128 files on a mounted USB stick.
Output of the command to confirm the statement was not provided.
From my point of view, something close to valid behavior was described.
- If a file from an external drive is chosen for <input type="file">
then it is reasonable to expect that it can be used later when a form is
submitted or an e-mail with the attachment is sent. Users are free to
select another file, so eagerly reading the file to memory is not always
reasonable. As a result it may be impossible to unmount the drive
immediately.
- File icons should appear in the file chooser and it may assume
determining media types of these files.
So precise description of steps and observed effects is necessary to
make this bug report convincing.
