[abugheratwork]

I think you're right. I also think the browser, as your agent, should enforce expectations. "This website wants to upload data. Allow? [Once] [Always] [No] [Click here to see the data.]"

[slavik81]

Unfortunately, you'd have to prohibit downloads as well, as the request sent to the server could contain information.