[allendoerfer]

What if the user wants to use the file outside the browser, where they do not have access to the HTTP headers?

[georgyo]

The same is true, if you rename a .png to .jpg and opening it with an image viewer, it will render.