Hello.

The example above only validates file extension. You should also consider to validate mime type. (This post talks about it)

Also, some forge components allow you to block/allow specific extensions. See if any of them work for you as it can probably by the easier solution.