attach, input, textarea: disallow to provide custom content #1104