input: off-by-three
input: do not misinterpret attachment MRLs as file paths, fixes #10046