DOCS Document that you can set the global allow extensions via YAML.

As mentioned by @simon_w in http://www.silverstripe.org/customising-the-cms/show/63140