Note that anything on the website that includes "webdav" will also be ignored, so a potential exploit is to have a page with "webdav".
This exploit would require to be intentionally triggered by a content creator and is unlikely the will know, just a point to be taken into consideration.
