Merged r13404 from trunk to 2.5-stable (#17581)

stricter check of uploading attachments.

Contributed by fred bregar.

git-svn-id: http://svn.redmine.org/redmine/branches/2.5-stable@13405 e93f8b46-1217-0410-a6f0-8f06a7374b81