API Block all yaml files by default, to reduce the change of information leakage