Web applications cannot accept files from user's machine as easily and intuitively as native OS applications - users can't drop images from desktop right into documents edited in WYSIWYG editors, on-line file browsers, asset management interfaces of CMSes.
Although browsers could allow <input type=file> controls to accept dropped files, drop zone would have to be limited to small area occupied by the control. This is not how applications usually work - they don't have area exclusively for dropping files, but entire window or regular UI controls react to dropped files.
There's nothing inherently wrong with having <input type=file> with file browser, some users may even prefer this type of UI, but depending on type of application/user preference such UI may feel inefficient and unintuitive.
- Dropping image from local machine (desktop, file explorer/finder window, another application) into WYSIWYG (contentEditable) editor to have image uploaded to server and inserted into edited document right under cursor - just like you can with office suites.
- Dropping image into textarea that uses BBcode or Wiki syntax to have image uploaded and appropriate image embedding syntax automatically inserted.
- Adding attachments in a webmail
- Web-based file browser/asset management interface
- Drag'n'drop customization of images in page templates, forum avatars, etc.
The basic concept
A universal IDREF attribute that would connect particular element in document with a
<input type=file> control.
<input type=file id=uploader> <div dropped-files=uploader>drop your files here!</div>
In the above example, when file is dropped onto
maxattribute to allow multiple files to be dropped at once.
Note: alternative approach would be to use DOM event triggered when a file is dropped. That could be much more flexible, but probably would require giving JS method for passing file information from event object to chosen
<input> element - with complexity of DOM events and inherent insecurity of JS prototypes it could be too difficult to implement securely. With IDREF browser can keep full control and have process of setting
<input type=file> hardcoded.
These steps are supposed to allow dropping files directly into
<input>, or into a designated drop zone. As a fallback a
<form> can be assumed to be a drop zone.
When user drops file(s) into the document:
- Take element on which file(s) were dropped (drop target) - usually it will be target of
- If the element is
<input type=file>proceed to the next section.
- If the element does not have
dropped-filesattribute, check its parent. Continue checking ancestors until the attribute is found or there are no more parent elements.
- If element with
dropped-filesattribute was found:
- Find element referenced by
- Verify that referenced element it's an
- If above conditions are met proceed to the next section.
- Otherwise ignore dropped files or perform browser's default action and abort these steps.
- Find element referenced by
- Start again from the drop target
- If the element is not
<form>, check its parent. Continue checking ancestors until
<form>is found or there are no more parent elements.
- Find first
<input type=file>that belongs to that form
- If element can be found, proceed to the next section.
- Find first
- Otherwise ignore dropped files or perform browser's default action.
(this algorithm can be optimized to walk up the DOM tree only once)
The next section
- Synchronously fire
filesdroppedevent on drop target
filesdroppedevent was cancelled, ignore dropped files and abort these steps.
- Set value of
<input>just as if files were chosen using regular method (including setting multiple files if
maxattribute permits) and fire
Dropping is limited to one DOM tree (does not cross frames). Scripts still can't set value of <input type=file>.
The only new risk is that script may know exactly when user has chosen a file and may start uploading it immediately (IIRC currently major browsers don't trigger
change event on file controls).
Browsers which used to open files dropped into document area will probably have to ask user for confirmation when first file is dropped to prevent websites from stealing files from users unaware of the new feature.
- It should reference relevant
- Provide some information about dropped file(s) (file name, mime type, size?)
- If possible, provide information about exact place where event occurred (using
Rangeobject for WYSIWYG?)
- How would script mark areas where files can't be dropped (temporarily/conditionally) allowing browser to dynamically change cursor? Is script fiddling with CSS cursor property and canceling
- Since the solution requires form and
<input>element, backwards compatibility can be maintained. The problem is script may rely on files being set via drag'n'drop and may not act properly when user uses file control directly.
- Many elements could reference single
<input>. Is this desirable? Disallowing that might help backwards compatibility (it would be more likely that authors prepare separate <form>s pre-filled with necessary data), OTOH it would be easier for authors to have single uploader for multiple items on the page.
- Would it be possible to have previews of images and documents available prior upload? Import into
- Should the form be submitted asynchronously and automatically? It would allow browser to save user's time by uploading immediately and in the background. There would be possibility of uploading multiple files at the same time (alternatively they could be queued/batched).
- If upload is async, script would have to receive information from the server once upload finishes (WYSIWYG editors would need to put placeholder in the document while file uploads and replace it with the real thing afterwards). Currently it can be hacked via
<from replace=values>and hidden input element or
<from target=hidden_iframe>and cross-frame scripts.