Unverified50% confidenceFactExact time
In Chromium, a file:// page can use fetch() to read other local files and inherits no CSP.
1
Sources
50%
Confidence
Long-term
Relevance
10/18/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedCSP only takes effect on documents loaded via HTTP(S) or data: URLs, and local files loaded via the file:// protocol inherit no CSP by default.71% similarUnverifiedundetected-chromedriver采用从浏览器二进制层面直接patch Chromium源码修改特征的底层思路，而非在JavaScript层打补丁60% similarUnverifiedHTML files smaller than 256KB are loaded in the preview panel as data: URLs, with a CSP of script-src 'none' and an opaque origin, and inline scripts are blocked.59% similarUnverifiedA data: URL embeds the file content in the URL, and the browser treats it as an opaque origin, so it cannot access other local files via relative paths or scripts.58% similarUnverifiedThe preview panel is typically implemented on Chromium's WebView or a similar component, has full JavaScript execution capability by default, and may have read access to the local file system.57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1061013API
curl https://kongchang.com/api/v1/knowledge/claims/1061013MCP
get_claim(id=1061013)