I thought it would not be a problem since you are not supposed to use it on production, where this kind of attack usually happens.

I ended up doing something similar to what `AssetDispatcher` does.