so that users can't run arbitrary code on the master.
Attach a file by drag & drop or click to upload
