use HTML5 so blob URLs work