Try doing the logic of whether or not the file is acceptable via a worker, will be cheap/efficient to do so, unfortunately you can't trust the browser