[api] Avoid finding forbidden info in full text search
[webui] Test for forbidden packages