Caller uses catalog to call method, avoid trusting it.
Attach a file by drag & drop or click to upload
