@silverpill what exactly do you mean by "saved without extension"? afaik removing the extensions does not prevent a file from being executed (at least on unix) or do you mean revoking executing permission like with chmod? and even that would not prevent the file from being somehow process by pleroma in a vulnerable way (i could be totally wrong tho).