diff --git a/server/Application/Api/Model/AttachmentModel.class.php b/server/Application/Api/Model/AttachmentModel.class.php
index 3a41ecd99..b518b9b57 100644
--- a/server/Application/Api/Model/AttachmentModel.class.php
+++ b/server/Application/Api/Model/AttachmentModel.class.php
@@ -309,6 +309,8 @@ public function isDangerFilename($filename){
 			|| $isDangerStr($filename , ".aspx")
 			|| $isDangerStr($filename , ".xsd")
 			|| $isDangerStr($filename , ".asa")
+			|| $isDangerStr($filename , ".cshtml")
+			|| $isDangerStr($filename , ".axd")
 		) {
 			return true;
 		}