What does the security model for opening the files look like? If you specify a directory chooser the app can span the directory tree and open/parse all files readable to the user? Any idea if it will walk symbolic links? I'm a bit surprised there isn't more of a user warning from the browser.
Nice proof of concept though! Very impressive what can be done. Worked well in stable channel + openSUSE.
Operating systems seem to care a lot about write access , less about read access. As much as browsers should care about this an OS should do some sandboxing.
The permission is implicitly granted by the user when they select a file. (Obviously this is implementation specific, but I think all implementations behave this was)
Nice proof of concept though! Very impressive what can be done. Worked well in stable channel + openSUSE.