allowed mineType on upload page (e.g. text/* *.java)