The WebProcess cannot open file paths dragged and dropped into it. We can either try using the portal[1] for this or implement something custom probably similar to it where the UI process converts it to an FD. [1] https://github.com/flatpak/xdg-desktop-portal/pull/222
We've decided to trust the NetworkProcess for now and not sandbox it so this no longer applies.