allow html upload