Log in as a Confluence administrator, click "Confluence Administration"> "Page and Attachment Security Enhancer"> "Global Configuration", and select "Attachment Download Restrictions".
...
"Restrict the types of attachments that can be downloaded" switch default: on.
...