improve security - remove index + forbidden somes extensions