Need to mask Session ID when uploading attachments:
Release : 17.3
Component :
From options manager please install below option and recycle services:
use_encrypted_sid_and_cookie