If you are using our Uppy file uploader you can set allowedFileTypes via the restrictions option

Even if you have already limited files on the client-side, you should also limit them on the back-end. For this, you can use Transloadit's file filtering capabilities.