Oh, man. The idea that TextEdit automatically parsed .txt files as HTML if they started with a certain file signature is problematic...
...but the fact that file:// schemes can access remote files by appending /net/ followed by a domain name is pretty shocking.
I mean, the entire purpose of "file://" would seem to be to provide access to local/mounted files and only those.
The fact that a Mac engineer thought it would be a great "feature" to allow file:// to access the entire internet is... kinda terrifying. Did that get patched, or was it only TextEdit?
...but the fact that file:// schemes can access remote files by appending /net/ followed by a domain name is pretty shocking.
I mean, the entire purpose of "file://" would seem to be to provide access to local/mounted files and only those.
The fact that a Mac engineer thought it would be a great "feature" to allow file:// to access the entire internet is... kinda terrifying. Did that get patched, or was it only TextEdit?