Note that this protection only applies to attachment uploaded by users who don't have programming right.