Manual:$wgAllowJavaUploads

Details
Allow Java archive uploads. This is not recommended for public wikis since a maliciously-constructed applet running on the same domain as the wiki can steal the user's cookies.