Settings: escape extension dots in default EXCLUDE list, avoid empty entry.
Settings: Add docx and xlsx to the allowed file list.
Set xframe_options_sameorigin policy on filebrowser views.
Add fake model to show filebrowser in admin dashboard