(url-file-local-copy): Plug race condition security hole.
Attach a file by drag & drop or click to upload
