HUMAN VERIFICATION REQUIRED ASVS 13.4.7 Served-file extension allowlist

The web tier is configured to only serve files with specific file extensions to prevent unintentional information, configuration, and source code leakage.