[SECURITY] fileDenyPattern ignored in file-list module