well, i never did, just had a look at the html reference and reported.
if it doesn't work, maybe it is browser's fault.
you could check other browsers, or find information about compliance of yours.
keep in mind that HTTP is request/reply. if even you ask me to filter out files, HFS has to receive the whole file before discarding. it is much better to avoid the client uploading by acting on the template.