How to prohibit uploading files with .php extension to Bitrix?

Question

PHP

I noticed that in Bitrix viruses can get through the bootloader.
Is it possible to limit the available permissions for uploading to Bitrix and where?
For example: in MODX I can put a list of permissions that can be loaded .jpg, .png, .gif, .svg, etc.
ps thanks for the sympathy

Answer 1

Here it is configured, but it all depends on custom modules, they may have vulnerabilities.

Answer 2

There are also settings for the "File" type field, in infoblocks - you can also set a list of extensions there

Answer 3

Когда настроите - возьмите файл index.php, переименуйте его в index.php.jpg и проверьте, чего стоят эти настройки.