2

While applying to a job, I uploaded a resume to a recruiting website:

C:\myname\an\embarrassing\path\to\my\resume.pdf

Can the website see the file path of my uploaded document?

  • not in any browser newer than about 8 years old... – dandavis Jan 8 at 20:15
1

No! Almost all modern browsers change the path to something like C:\fakepath\filename.ext in order to protect your privacy.

  • 1
    @forest It's not included in the upload, but the (fake) path can be read by Javascript as the .value of the input element. – duskwuff Jan 9 at 3:44
1

Browser security controls prevent client-side scripts from accessing the full path of local resources. JS running inside the context of a browser by default has no access to the file system. HTML5 provides an API as mentioned in this answer but apparently anonymizes/sanitize output at the browser level.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.