Translations:Manual:$wgCheckFileExtensions/7/en

Setting this to false is insecure for public wikis.