We are investigating leveraging OneDev for our CI/CD purposes, and after a security assessment, the assessor determined that the current approach to how files are uploaded/pushed presents a vulnerability per OWASP standards as it globally allows, by default, any file types to be pushed to repositories, which can introduce malicious payloads.

This ticket proposes a configurable option to allow admins to block specific file extensions (e.g., .exe. .bin) from being uploaded to all projects globally (either require admin group review or reject completely).