nested_header_checks で
/Content-Disposition: attachment/ REJECT
/Content-Type: application\// REJECT