title: Is it possible for a downloaded HTML file to get a directory listing of local directories?
body: <p>I am asking from a security standpoint. I know a downloaded HTML file can send out files as long as it knows (or can guess) where they are stored.</p>
  
  <p>A new Google Chrome change (can be tested by downloading the Chrome Canary Build) will depend on the OS to warn users about opening files like EXE files and others, but Windows does not warn about HTML files. It seems that with Chrome you cannot just get the html of an iframe of a directory. You can only do it for a single file.</p>
  
  <p>Related: <a href="https://superuser.com/questions/223253">Are there files on a PC that are always same path/name and contain sensitive information?</a></p>
  
  <p><strong>Edit:</strong> I am deleting the related question. It seems that on the <em>current version</em> of Firefox you can only access files in the same directory and in IE you can only access files after disabling security and in Chrome only if it is accessing itself.</p>