Don't disallow non-js assets