Search for authorized_extensions in the admin settings.
authorized_extensions
You have total control over what extensions to allow as you see fit: