Browser plugins question.
-
Maybe this is not the best forum to answer my question, but because plugins can be written in C++ I hope somebody who is making them will answer :) Can somebody tell me if browser plugins for IE (activeX) or firefox can read (any) files on the HDD? (when they know exact path). Somebody have told me that it is insecure to store sensitive data into "application data" folder because it can be accesses by web plugins. Is it true? I'd guess they can access any files/folders with active user permissions. Thank you
-
Maybe this is not the best forum to answer my question, but because plugins can be written in C++ I hope somebody who is making them will answer :) Can somebody tell me if browser plugins for IE (activeX) or firefox can read (any) files on the HDD? (when they know exact path). Somebody have told me that it is insecure to store sensitive data into "application data" folder because it can be accesses by web plugins. Is it true? I'd guess they can access any files/folders with active user permissions. Thank you
rrrado wrote:
Can somebody tell me if browser plugins for IE (activeX) or firefox can read (any) files on the HDD?
Since the code is C++, why wouldn't they be able to? See here for BHO examples.
"Love people and use things, not love things and use people." - Unknown
"The brick walls are there for a reason...to stop the people who don't want it badly enough." - Randy Pausch
-
rrrado wrote:
Can somebody tell me if browser plugins for IE (activeX) or firefox can read (any) files on the HDD?
Since the code is C++, why wouldn't they be able to? See here for BHO examples.
"Love people and use things, not love things and use people." - Unknown
"The brick walls are there for a reason...to stop the people who don't want it badly enough." - Randy Pausch
-
Maybe this is not the best forum to answer my question, but because plugins can be written in C++ I hope somebody who is making them will answer :) Can somebody tell me if browser plugins for IE (activeX) or firefox can read (any) files on the HDD? (when they know exact path). Somebody have told me that it is insecure to store sensitive data into "application data" folder because it can be accesses by web plugins. Is it true? I'd guess they can access any files/folders with active user permissions. Thank you
Browser plugins can access files in the computer. Just take the case of online virus scanners, they are able to scan the entire HDD for viruses. -Saurabh