Blocked by the HTTP Security filter: URL contains ‘.’ in the path You’ve clicked “filter ambiguous extensions” in the HTTP filter for the rule. Untick it