close #3384 This issue was reported by https://hackerone.com/brakhane
Attach a file by drag & drop or click to upload
