You can upload the following types, and other types that are not in the forbidden list.
Images
jpg, jpeg, png, gif, webp, bmp, tiff, tif, ico, svg, heic, avif
Documents
pdf, doc, docx, rtf, odt, txt, epub
Spreadsheets
xls, xlsx, ods, csv
Presentations
ppt, pptx, odp
Archives
zip, rar, 7z, tar, gz
Packages
apk, ipa, aab, deb, rpm
Audio
mp3, wav, ogg, flac, m4a
Video
mp4, mov, webm, mkv, avi
Fonts
ttf, otf, woff, woff2
Data & code
json, xml, html, htm, md, yaml, yml, sql, wasm
Not allowed: php, php3, php4, php5, php7, php8, phtml, phar, phps, pht, pgif, exe, sh, bat, cmd, com, scr, js, mjs, cjs, pl, py, pyc, pyo, cgi, asp, aspx, ashx, cer, jsp, jspf, jspx, vbs, vbe, wsf, dll, msi, hta, htc — including as any dotted segment in the name (e.g. .php.jpg is rejected).