Due to build-in limitations in the basic file upload that HTML provides
(see here:
- recommended-way-to-check-file-size-on-upload
- ensure-file-size-of-uploaded-file-is-lower-than-maxrequestlength-before-the-upload
- how-to-open-file-chooser-that-can-choose-multiple-files-in-explorer
)
I am considering adding to my web application the use of either the flash plugin SWFUpload or the activeX FileSystemObject
My question is: which one of them is safer? I think that the capabilities of SWFUpload is less intrusive and has limited access to the user’s filesystem than the FileSystem activeX but I am not totally sure.
Definitely SWFUpload: It doesn’t require special rights to access the file system (and it would be the whole file system) as FileSystemObject does.
Also, SWFUpload works in all browsers that have Flash installed. FSO works only in Internet Explorer (and probably only on Windows).