Instead of implicitly allowing whatever core allows for uploads, we now display all the file types in the options, where each one can be enabled or disabled.
We only explicitly disable html/js by default but they can be toggled back if a user wishes to do so.
Additionally, just because I'm lazy, those are unrelated things that landed in the PR:
Fix logic error that resulted in inverted 'suppress_default_fields' default value
Default settings will be populated consistently now.
rinatkhaziev
commented
3 years ago 
Instead of implicitly allowing whatever core allows for uploads, we now display all the file types in the options, where each one can be enabled or disabled.
We only explicitly disable html/js by default but they can be toggled back if a user wishes to do so.
Additionally, just because I'm lazy, those are unrelated things that landed in the PR: