Currently In-Portal uses 2 types of upload controls:
- single file upload (<input type="file" .../>)
- multi file upload (flash based)
Single file upload uses Mime-Type to validate uploaded files, but multi upload uses file extension check to do it.
Attached patch gives ability to single file uploader to perform extension-based checks too.