Fix: Validate size returned for attachments