You need to ensure that users can only access files that have the .htm, .html, .asp, and .aspx file extensions