Move the JS compatibility request filter to the post security chain