I think javascript has a hard time accessing local files without an api, but it could easily create a hidden tag with a src field pointed at something and take the data and upload it.
With this Interceptor in place, this should not happen as easily anymore.
|