I recently went to a website that provided online file conversion. It asked me to provide an input file to be format-converted, and provided a "Browse" button which, when clicked, displayed my file system and allowed me to navigate to a file to be uploaded. Come to think of it, I guess Facebook, etc have similar functionality.
Isn't there some kind of security loophole here? Can the webpage browse my file system on its own and upload files without my clicking "Browse"?
Is there an ASP.Net control that provides webpage access to the users file system?
Thanks for clarifications.
...
Go to the complete details ...