attach, input, textarea: disallow to provide custom content

close #1103