Definitely agreed around a security risk, and should be done on the dispatcher level.Of course it needs to be documented and treated accordingly with controls.If you are internal facing with a directory, is there a possibility to disable the filter using a wildcard for a subdirectory, or do you need...