I have the following list of extensions that I usually permit in drupal attachments:

  txt pdf doc docx html csv xlsx xlsm sh json
  cer pem pub key
  png jpg jpeg gif
  mkv sfv avi mp3 mp4 webm mov
  zip tar gz