Actually I have a solution, by running a tiny HTTP daemon (like MiniWeb which I develop and maintain) locally which responds to browser requests (from web page) and invoke AVRDUDE to perform the HEX downloading. This is technically feasible but the disadvantage is user must start a daemon program manually.