Bugfix: CreateAllowedExtensionRegex

The regular expression shouldn't allow extensions like .js2, .jsd,
.css7, .cssz1