two items didn't do that properly, one was exploitable, the other was not, but fixed anyway.
Attach a file by drag & drop or click to upload
