Add allowed-extension support for static file app