Not a huge issue, but has security implications if OAuth tokens leaked
Attach a file by drag & drop or click to upload
