From 303ae3c58b0f8e646b7ac40da547ec1a03db3552 Mon Sep 17 00:00:00 2001
From: Sam Rose <hello@samwho.dev>
Date: Tue, 21 Nov 2023 11:41:32 +0000
Subject: [PATCH] Block some code extensions that could be used maliciously.

---
 packages/shared-core/src/constants.ts | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/packages/shared-core/src/constants.ts b/packages/shared-core/src/constants.ts
index 3838cb7636..0787b8bed1 100644
--- a/packages/shared-core/src/constants.ts
+++ b/packages/shared-core/src/constants.ts
@@ -119,6 +119,7 @@ export const InvalidFileExtensions = [
   "ipa",
   "isu",
   "job",
+  "js",
   "jse",
   "ksh",
   "lnk",
@@ -129,6 +130,7 @@ export const InvalidFileExtensions = [
   "osx",
   "out",
   "paf",
+  "php",
   "pif",
   "prg",
   "ps1",
@@ -145,6 +147,7 @@ export const InvalidFileExtensions = [
   "vbe",
   "vbs",
   "vbscript",
+  "wasm",
   "workflow",
   "ws",
   "wsf",