Security vulnerability: Disable access to /content by default due to vulnerability disclosed separately

[pgoodrich]

Description

Disabled access to /content path for most mime types in dispatcher filters to correct a security vulnerability.
Added default access to /content .json paths in Cloud filters for consistency.

Related Issue

No open issue since this is a security vulnerability. Disclosed issue separately to Adobe via Daycare.

Motivation and Context

Security Vulnerability

How Has This Been Tested?

Swapped project to use mapped + allowlist specific paths only.

Screenshots (if appropriate):

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)

Checklist:

• I have signed the Adobe Open Source CLA.
• My code follows the code style of this project.
• My change requires a change to the documentation. (https://experienceleague.adobe.com/docs/experience-manager-dispatcher/using/configuring/dispatcher-configuration.html?lang=en#example-filter-section)
• I have updated the documentation accordingly.
• I have read the CONTRIBUTING document.
• I have added tests to cover my changes.
• All new and existing tests passed.

[pgoodrich]

@bpauli Any path forward on this?