avoid XSS with emails in format "Carsten Brandt <mail@cebe.cc>"
Attach a file by drag & drop or click to upload
