将文件上传到网站时，网站是否可以查看其上传的文件路径？

Question

When uploading a file, before pressing the upload button, the folder/file path is visible in the website's upload form.

.

Is the website able to record that data?

Normally a website could possibly record any data typed into a web form - is this any different?

Answer 1

It doesn't appear to work. I created the following fiddle https://jsfiddle.net/5samkn5a/

Basically I took an input

<input type="file" id="input"/>

And set a listener to its value

$(function(){
$("#input").change(function(){
console.log($(this).val());
})
})

Then I tried it in the latest chrome/firefox/edge They all give a fake path as value. The only thing that's real is the file name. May be that some browsers actually expose the full path, but not the ones I tested.

It makes sense that the browser is shielding this information since at least on windows when you are choosing a document it will most likely reside in your current user directory. So the path will contain your local user name and that's not something you want to give to a random website, right?