I suppose it may not make that much sense to disable based off file type if both file types will automatically be loaded from classpath as the user can simply rename the file from .edn to .clj to inject code.  If the developer wants to disable eval then they need to restrict the file types that can be loaded and if they do that then they can also override the middleware.  

+1