Fix for issue #1: extensions param not passed down in file_allowed