Currently with Tableau Server 2018, There is only an option to blacklist extension on the server level. Instead of this, I feel we should have an option to whitelist extensions and deny anything apart from this.
Instead of saying "Allow everything but these extensions", It would be useful to say "Allow only these extensions" on all the sites. This would allow all the users to use vetted extensions, rather than using something that looks fancy at the outset but causes problem at a later stage.
--> Community Manager update [Ciara Brennan]
Also refer to Duplicate idea
https://community.tableau.com/ideas/9813 ( 1 Vote )