Sandboxing doesn't work if a local file is dropped on the content area
Created attachment 88901 [details] Patch
Committed r83362: <http://trac.webkit.org/changeset/83362>