Open bradisbell opened 4 years ago
If I were to click my root directory, it would most likely be on accident, but if it were intentional, I would still want to do it.
If anything, the browser vendor should be highly encouraged to give an extra warning if the user selects a system directory.
From the explainer:
The user should be free to select any directory they choose. There are many use cases for sync apps, backup apps, etc., which require broad access. Putting security restrictions in the specification itself permanently cripples the API and perpetuates the web as a second-class application platform.
If the user agent chooses to make limitations, then at least users have a choice to use a different user agent.