[WIP][userdata] Remove css and js types

So that a user would upload js or css files?
Is not this a potential security vulnerability?