Enforcing extension-less file validation (fixes #1767)

By default, File.allowed_extensions contains '' (no extension),
but if you specifically remove it, the validation should pick it up.