FYI, I was trying to insert a few copyrighted ePub files, and the composer wasn't showing attachments. So I've tried to insert a PDF, and then, 0x0.st/HxeE.png
Excuse me but these previews don't seem very secure. They're either cached or directly fetched through the user's connection aren't they? What if they're illegal files?