diff --git a/src/main.rs b/src/main.rs
index ab193f1..eea5bed 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -1,6 +1,7 @@
 #[macro_use]
 extern crate rocket;
 use rocket::data::{Data, ToByteUnit};
+use rocket::shield::{Shield, NoSniff};
 use rocket::{form::Form, response::Redirect};
 use rocket_dyn_templates::Template;
 
@@ -117,6 +118,8 @@ async fn index() -> Option<Template> {
 
 #[launch]
 fn rocket() -> _ {
+    let shield = Shield::default().disable::<NoSniff>();
+
     rocket::build()
         .mount(
             "/",
@@ -129,5 +132,6 @@ fn rocket() -> _ {
                 pretty_retrieve_ext
             ],
         )
+        .attach(shield)
         .attach(Template::fairing())
 }
diff --git a/templates/index.html.tera b/templates/index.html.tera
index 958c11c..227cf39 100644
--- a/templates/index.html.tera
+++ b/templates/index.html.tera
@@ -119,15 +119,12 @@ AUTHOR
     }
 
     function dropHandler(ev) {
-        console.log('File(s) dropped');
-
         ev.preventDefault();
 
         if (ev.dataTransfer.items) {
             for (var i = 0; i < ev.dataTransfer.items.length; i++) {
                 if (ev.dataTransfer.items[i].kind === 'file') {
                     var file = ev.dataTransfer.items[i].getAsFile();
-                    console.log('... file[' + i + '].name = ' + file.name);
 
                     var url = window.location.href;
 
@@ -140,18 +137,29 @@ AUTHOR
                         });
                 }
             }
-        } else {
-            for (var i = 0; i < ev.dataTransfer.files.length; i++) {
-                console.log('... file[' + i + '].name = ' + ev.dataTransfer.files[i].name);
-            }
-        }
+        }    
     }
 
     function dragOverHandler(ev) {
-        console.log('File(s) in drop zone');
-
         ev.preventDefault();
     }
 
+    document.onpaste = function(pasteEvent) {
+        var item = pasteEvent.clipboardData.items[0];
+        var blob = item.getAsFile();
+
+        if (blob !== null && blob !== '') {
+            var url = window.location.href;
+
+            postData(url, blob)
+                .then(data => {
+                    window.location.href = data.url;
+                })
+                .catch(function (err) {
+                    console.info(err + " url: " + url);
+                });
+        }
+    }
+
 </script>
-{% endblock body %}
\ No newline at end of file
+{% endblock body %}