We should really be using a whitelist, not a blacklist. (Check to make sure it is in a list of known classes, not in a list of bad filenames. There is an infinite number of bad filenames.)

If I make a request to the url `/foo`, this code is still going to look for a class called `fooCommand` and return a 500 error.