Without server-side uploads and validation, csvxml can be advertised at a much reduced risk.
Close #6