File URL Not allowed to load local resource in the Internet Browser

Question

I ve got a major brainteaser   I want to open a file in classic ASP  I m using various variables because things can change but the outcome is correct  I know this because I ve tested the outcome by copying the linkadress and placing it in my URL  Now the problem  If I click my link it doesn t do anything  Not a refresh  not a redirect  nothing  Does anyone know what I did wrong   Ok here s the deal  My file isn t always local  it depends on what environment I m on  If I copy-paste the outcome of my url it does download  If I click my URL it doesn t respond  Any ideas  Browser problem   although I ve tested 5 browsers  Or anything else  I m really stuck here and the internet does not seem to be on my side   I ve got 3 environments  The variables underneath here are so that the link works  I know the link works because I ve tested it by copying  And yes  it does begin with file     and yes I m sure the link is right   Here s my line of code   response write   lt td class  tab kolom2  gt  lt a href    amp rootRs  pre rootpad   amp rootRs  rootpad protocollen   amp     amp overzichtRs  Formuliernr   amp   Uitvoeringsoverzicht xls  target   blank  download gt Click here lt  a gt  lt  td gt        EDIT  Screenshot with error outcome of link

User · Answer

For people do not like to modify chrome s security options  we can simply start a python http server from directory which contains your local file   python -m SimpleHTTPServer   and for python 3   python3 -m http server   Now you can reach any local file directly from your js code or externally with http   127 0 0 1 8000 some file txt

User · Answer

Follow the below steps   npm install -g http-server  install the http-server in angular project  Go to file location which needs to be accessed and open cmd prompt  use cmd http-server    Access any of the paths with port number in browser ex  120 0 0 1 8080  4 now in your angular application use the path  quot http   120 0 0 1 8080 filename quot  Worked fine for me

User · Answer

Now we know what the actual error is can formulate an answer   Not allowed to load local resource  is a Security exception built into Chrome and other modern browsers  The wording may be different but in some way shape or form they all have security exceptions  in place to deal with this scenario  In the past you could override certain settings or apply certain flags such as  --disable-web-security --allow-file-access-from-files --allow-file-access  in Chrome  See https   stackoverflow com a 22027002 692942   It s there for a reason At this point though it s worth pointing out that these security exceptions exist for good reason and trying to circumvent them isn t the best idea   There is another way As you have access to Classic ASP already you could always build a intermediary page that serves the network based files  You do this using a combination of the ADODB Stream object and the Response BinaryWrite   method  Doing this ensures your network file locations are never exposed to the client and due to the flexibility of the script it can be used to load resources from multiple locations and multiple file types  Here is a basic example  getfile asp    lt   Option Explicit  Dim s  id  bin  file  filename  mime  id   Request QueryString  quot id quot     id can be anything just use it as a key to identify the   file to return  It could be a simple Case statement like this  or even pulled from a database  Select Case id Case  quot TESTFILE1 quot     The file  mime and filename can be built-up anyway they don t     have to be hard coded    file    quot   server share Projecten Protocollen 346 Uitvoeringsoverzicht xls quot         mime    quot application vnd ms-excel quot     Filename you want to display when downloading the resource    filename    quot Uitvoeringsoverzicht xls quot    Assuming other files  Case     End Select  If Len file  amp   quot  quot    gt  0 Then   Set s   Server CreateObject  quot ADODB Stream quot     s Type   adTypeBinary  adTypeBinary   1 See  quot Useful Links quot    Call s Open     Call s LoadFromFile file    bin   s Read       Clean-up the stream and free memory   Call s Close     Set s   Nothing     Set content type header based on mime variable   Response ContentType   mime    Control how the content is returned using the     Content-Disposition HTTP Header  Using  quot attachment quot  forces the resource    to prompt the client to download while  quot inline quot  allows the resource to    download and display in the client  useful for returning images    as the  quot src quot  of a  lt img gt  tag     Call Response AddHeader  quot Content-Disposition quot    quot attachment filename  quot   amp  filename    Call Response BinaryWrite bin  Else    Return a 404 if there s no file    Response Status    quot 404 Not Found quot  End If   gt   This example is pseudo coded and as such is untested  This script can then be used in  lt a gt  like this to return the resource   lt a href  quot  getfile asp id TESTFILE1 quot  gt Click Here lt  a gt   The could take this approach further and consider  especially for larger files  reading the file in chunks using Response IsConnected to check whether the client is still there and s EOS property to check for the end of the stream while the chunks are being read  You could also add to the querystring parameters to set whether you want the file to return in-line or prompt to be downloaded   Useful Links   Using METADATA to Import DLL Constants - If you are having trouble getting adTypeBinary to be recongnised  always better then just hard coding 1   Content-Disposition What are the differences between    inline    and    attachment     - Useful information about how Content-Disposition behaves on the client

User · Answer

You just need to replace all image network paths to byte strings in HTML string. For this first you required HtmlAgilityPack to convert Html string to Html document. https://www.nuget.org/packages/HtmlAgilityPack

Find Below code to convert each image src network path(or local path) to byte sting. It will definitely display all images with network path(or local path) in IE,chrome and firefox.

string encodedHtmlString = Emailmodel.DtEmailFields.Rows[0]["Body"].ToString();

        // Decode the encoded string.
        StringWriter myWriter = new StringWriter();
        HttpUtility.HtmlDecode(encodedHtmlString, myWriter);
        string DecodedHtmlString = myWriter.ToString();

        //find and replace each img src with byte string
         HtmlDocument document = new HtmlDocument();
         document.LoadHtml(DecodedHtmlString);
         document.DocumentNode.Descendants("img")
          .Where(e =>
        {
            string src = e.GetAttributeValue("src", null) ?? "";
            return !string.IsNullOrEmpty(src);//&& src.StartsWith("data:image");
        })
        .ToList()
                    .ForEach(x =>
                    {
                        string currentSrcValue = x.GetAttributeValue("src", null);                                
                        string filePath = Path.GetDirectoryName(currentSrcValue) + "\\";
                        string filename = Path.GetFileName(currentSrcValue);
                        string contenttype = "image/" + Path.GetExtension(filename).Replace(".", "");
                        FileStream fs = new FileStream(filePath + filename, FileMode.Open, FileAccess.Read);
                        BinaryReader br = new BinaryReader(fs);
                        Byte[] bytes = br.ReadBytes((Int32)fs.Length);
                        br.Close();
                        fs.Close();
                        x.SetAttributeValue("src", "data:" + contenttype + ";base64," + Convert.ToBase64String(bytes));                                
                    });

        string result = document.DocumentNode.OuterHtml;
        //Encode HTML string
        string myEncodedString = HttpUtility.HtmlEncode(result);

        Emailmodel.DtEmailFields.Rows[0]["Body"] = myEncodedString;

User · Answer

I didn t realise from your original question that you were opening a file on the local machine  I thought you were sending a file from the web server to the client   Based on your screenshot  try formatting your link like so    lt a href  file    C  Projecten Protocollen 346 Uitvoeringsoverzicht xls  gt Klik hier lt  a gt     without knowing the contents of each of your recordset variables I can t give you the exact ASP code

User · Answer

You will have to provide a link to your file that is accessible through the browser, that is for instance:

<a href="http://my.domain.com/Projecten/Protocollen/346/Uitvoeringsoverzicht.xls">

versus

<a href="C:/Projecten/Protocollen/346/Uitvoeringsoverzicht.xls">

If you expose your "Projecten" folder directly to the public, then you may only have to provide the link as such:

<a href="/Projecten/Protocollen/346/Uitvoeringsoverzicht.xls">

But beware, that your files can then be indexed by search engines, can be accessed by anybody having this link, etc.

[html] File URL "Not allowed to load local resource" in the Internet Browser

The answer is

Examples related to html

Examples related to url

Examples related to asp-classic

Examples related to href

Tags