Update README.md

diff --git a/README.md b/README.md
index 3697f4e01dd5f50cfb91030e58a5b3e8b5e56ec7..f93274b556493fd45ff07bfa3aef982eb8e2f191 100644 (file)
--- a/README.md
+++ b/README.md
@@ -83,6 +83,16 @@ Then add them to your crontab:
 
 These scripts check if DB entries and files are older then 24 hours and if they are deletes them.
 
+## MIME/EXT Blocking
+
+Blocking certain filetypes from being uploaded can be changed by editing the following settings in `static/php/includes/settings.inc.php`:
+```php
+define('CONFIG_BLOCKED_EXTENSIONS', serialize(['exe', 'scr', 'com', 'vbs', 'bat', 'cmd', 'htm', 'html', 'jar', 'msi', 'apk', 'phtml']));
+define('CONFIG_BLOCKED_MIME', serialize(['application/msword', 'text/html', 'application/x-dosexec', 'application/java', 'application/java-archive', 'application/x-executable', 'application/x-mach-binary']));
+```
+
+By default the most common malicious filetypes are blocked.
+
 ## Using SQLite as DB engine
 
 We need to create the SQLite database before it may be used by uguu.