Allow serving of static css, jpg, png from repl server

There is need to serve the whole app from repl server, thus adding few more allowed filetypes solves the immediate problem.
The question is: is there a need to allow only few "safe" file types?