Ian,<div><br></div><div>If changing the button text can be a security issue (e.g. induce the user to an action that he's not aware of), we can come up with some solutions.</div><div><br></div><div>What about allowing the Author to change the control's locale?</div>
<div><span lang="EN-GB" style="font-size:10.0pt;font-family:
Arial;mso-fareast-font-family:"Times New Roman";color:black;mso-ansi-language:
EN-GB;mso-fareast-language:PT;mso-bidi-language:AR-SA">By doing so, the UA can
then render the button with the same locale as the application without compromising
the security.</span></div><div><br><br><div class="gmail_quote">On Thu, Nov 6, 2008 at 1:32 AM, Eduard Pascual <span dir="ltr"><<a href="mailto:herenvardo@gmail.com">herenvardo@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="Ih2E3d">On Thu, Nov 6, 2008 at 12:15 AM, Samuel Santos <<a href="mailto:samaxes@gmail.com">samaxes@gmail.com</a>> wrote:<br>
><br>
> On Wed, Nov 5, 2008 at 10:46 PM, Ian Hickson <ian@hixie.ch> wrote:<br>
>><br>
>> On Wed, 5 Nov 2008, Samuel Santos wrote:<br>
>> ><br>
>> > I find it very hard to convince some clients that in order to have the<br>
>> > browse button in their language they must configure their browsers. The<br>
>> > vast majority of them don't even know where they can configure the<br>
>> > default browser language, and don't feel they should even have to do it.<br>
>> > It's also strange for them to have all the buttons in their language<br>
>> > except the browse buttons.<br>
>><br>
>> I understand but why don't they also complain about, say, the title of the<br>
>> dialog box that comes up? Or the items on the context menus?<br>
>><br>
>> Why do they use the wrong language browser in the first place?<br>
><br>
> In Portugal a lot computers come with the english OS version.<br>
> This means that the browser is in english and configured to have english as<br>
> the default language.<br>
><br>
> The problem with the input file button is that the client/user assumes that<br>
> the text that appears in it is the developer's responsibility, like with the<br>
> other button controls.<br>
> In the example you gave he knows that the dialog box is from the UA<br>
> (browser) and has nothing to do with the rest of the application.<br>
> I'm pretty sure that this happens a lot in non-english countries.<br>
<br>
</div>I agree with Samuel in that this is an issue. In Catalunya, most often<br>
Spanish software is used (both OS and browsers), because a lot of the<br>
software is not easily (or at all) available in Catalan (specially<br>
Microsoft software, such as Windows and IE, which ammount for a quite<br>
big fraction of web surfers). Seeing Spanish stuff in pages that are<br>
supposed to be in Catalan is quite annoying (especially when keeping<br>
in mind some historic factors).<br>
<br>
I can understand that there may be some security concerns with this<br>
control; but I don't think changing the "Browse" caption poses any<br>
threat. But if there is so much paranoia on this, browsers could be<br>
allowed (or even required) to ask for confirmation when picking a file<br>
if the caption has been changed (something like "Are you sure you<br>
would like to submit C:\example.txt to <a href="http://example.com" target="_blank">example.com</a>?" should be enough,<br>
and users would easily see such question as comming from the UA rather<br>
than from the webpage).<br>
</blockquote></div><br><br clear="all"><br>-- <br>Samuel Santos<br><a href="http://www.samaxes.com/">http://www.samaxes.com/</a><br>
</div>