[otrs] Disabling certain attachment types

Hello! We are implementing otrs (YAY!) and one big request is in regards to Cross Site Scripting. We need to limit which attachment types can be attached to a ticket. Barring that we could just turn off the ability to attach files. I have looked over the documentation and haven¹t found a way to do this yet. Does anyone know an easy way to turn off .exe, .vb, etc file types from being attached? If this doesn¹t exist any advice on disabling attachments would be appreciated. -- Julian Cook Securities and Exchange Commission