This checking should probably be enforced by the API.
Attach a file by drag & drop or click to upload