Hi rpsu,
HTML doesn't define restricted file types, you need to check if the file is a valid type *after* the user has selected the file and clicked open. It's a security restriction, the reason IE shows pictures and HTML as options is because Microsoft have chosen to do so, not because of any filters defined in the HTML.
Different browsers may show different filters depending on what they feel are the most commonly selected file types.
Ady