'nav' can be fixed bar, too
reorganization of blacklist code; protect binary POST uploads from showing as text (and failing)