Configurable blacklist/whitelist for uploaded files + some fixes
Check filename blacklist on EditableFileUpload and Tree.aspx, allow exe, disallow php