Do a security review of Shiny, and our upload-data method

[colinxfleming]

If we're pumping real data into this we should do some degree of security review that we aren't leaking data that we put into the upload button here. This is done when we've got some assurance that data stays off the server and doesn't leak on https.