Restrict file types for uploads on Return requests

Currently (v4.5.2) any file type can be uploaded if the uploads option is enabled for Return requests, which is naturally a security risk.

It would be extremely useful if, like with product attribute control types of "File upload", that the allowed file extensions could be specified in the admin, as these would usually be an image.

I see in ReturnRequest.cshtml that the file types can be restricted easily enough by editing the code, but it would be useful not to have to make custom changes for this.

Thank you.

It is a good idea!

Thanks for the suggestion, but it looks very specific, we'll leave it for customization (actually you just need to uncomment some lines on the view, they are already there).