Manual:$wgFileBlacklist

Details
Files with these extensions will never be allowed as uploads if $wgVerifyMimeType is enabled.

History

 * 'cgi' was added in 1.3.8
 * 'js' and 'jsb' were added in 1.5.0
 * 'php5' was added in 1.8.0