reject all dotfile entires for directory contents in http_browser