Move from file extension blacklist to whitelist.

[timbuckingham]

Per suggestion in this issue:
#280

Rather than specifically exclude dangerous file extensions begin with a list of safe file extensions and allow them to be updated in overridden via settings.php