`ok_('<script>' not in self.attachment2.display_name())`