Merge remote-tracking branch 'aa/issue/attachment_downloads' into features_prs/develop-next

* aa/issue/attachment_downloads:
  Exclude Vulnerable Image Files
  Only allow image attachments to be opened in the browser window