explicit injunction to disallow extensions that can't be bypassed
additional clarifications to the xml, json formats