fetch("file:///C:/Users/You/Documents/secrets.txt")
As long as same-origin is enforced this is probably OK? I'm going to steal my own secrets?
"Chrome wants to access 'secrets.txt'. Allow | Deny"
As long as same-origin is enforced this is probably OK? I'm going to steal my own secrets?