A XAML browser application (XBAP) running in partial trust can safely upload files from a client machine.