It is possible to read local files and text files from any domain using execCommand and IFRAME. I think window spoofing is also possible (have not verified that yet). Examine the source for more info.