bug #4737 :  Any files can be uploaded into a web site.

Add a whitelist of files that can be uploaded. The whitelist is based upon the file extension.