This prevents storing files with potentially executable extensions (e.g., PHP scripts) that could be executed if placed under a web server's document root. It introduces a configurable list of blocked extensions (defaulting to PHP-related ones) and a `BlockedExtensionException` to signal when such an attempt is made. The check is case-insensitive and considers the last extension.