From: David Mark on
Thomas 'PointedEars' Lahn wrote:
> David Mark wrote:
>
>> Jorge wrote:
>>> 1.- You can read any local file with an XHR *but*only*if* the
>>> location.protocol of the page is "file:", e.g.:
>>> [...]
>> But by default, some browsers (e.g. FF) do not allow this. You have to
>> adjust the security settings (assuming you can) to permit such
>> operations.
>
> Both statements are wrong as they are. What matters is that the SOP is met.
>

I think you are splitting hairs. But JFTR, in FF, the setting is:-

security.fileuri.strict_origin_policy

....and by default (setting is true) it will let you load files that are
in the same folder (or sub-directory. If you want to load any local
file, then you have to change the setting to false.

IE is a different story. As mentioned, you have to configure it
(assuming you are allowed to do that) to allow XHR on local files. I
didn't mean to imply that IE disallowed this by default.

And how is any of this news?