support list() (coma separated) configuration variables
+ introducing "blacklisted_extensions"