@firt Absolutely. That’s completely not working as intended. But one step earlier: probably file:// URLs should not have been shareable to begin with and throw an error instead, since your file:// isn’t accessible to me, so (to me) it doesn’t make (
@firt That’s my worry, too. If so, it just takes someone with a jailbroken device to figure out interesting files and their paths to share… This is a surprisingly easy attack. I checked the spec (https://t.co/x9waELmlx5 → https://t.co/2b3vMNDP9O), a
@srescio @raymondcamden Yes, browsers other than Safari on iOS internally use WKWebView, and the Web Share API is exposed there (https://t.co/A7rVyX9fEB). I just tested this on Chrome for iOS.
Wow, this Web Share API bug â¤µï¸ is concerning.
const pwn = () => {
navigator.share({
text: ‘Check out this cute kitten!’,
url: ‘file:///etc/passwd’,
});
};
Turns out Safari actually shares the _contents_ of /etc/passwords, and allows for
Fast, personalized, and private by design on all platforms: introducing a new 🦊 @Firefox for Android experience. This looks pretty exciting, and it includes access to some popular extensions like uBlock Origin. https://t.co/k9zZLrSNBd
@felipehoffa @takidau @ElliottBrossard @SnowflakeDB Congratulations on the new role! 🎈
@Rich_Harris @mathias @AMPhtml Oh, tracked as https://t.co/r109zlqzq9 already. Didn’t see all thread responses, sorry.
@Rich_Harris @mathias Have you filed an @AMPhtml bug? The team has been really responsive when I filed the infamous âš¡ï¸ issue (https://t.co/snoUxhbCxz).
@rustybrick @victorpan Obviously the Chrome extension (https://t.co/A1WGHGfady) works on Edge, too, but if you prefer staying in the Edge ecosystem, you can install Link to Text Fragment from the Edge Add-on Store: https://t.co/EwRQZiWC4H. And, shh 🤫,
taybenlor Just used @samthor’s “Undoer” (github.com/samthor/undoer) to add native cmd+z undoing to a web app. So exceedingly smooth and easy. Web is good.
@lilyraynyc #:~:text=insert%20your%20words works as long as “insert your words†appears exactly once on a page. Sometimes you want to link to a _specific_ instance of ambiguous text. This is where Link to Text Fragment excels: https://t.co/yLeEpp49E3.
@cemper Thanks for the shoutout! 😊
RT @samthor: Hey web Twitter 🕸ï¸, I wrote a post on better understanding `load` and `DOMContentLoaded`, mostly around why they’re not always…