Cool icon for the upload drop box
Security: generalized path checking
Fix: dragleave