add ability to setup allowed extensions in config