Some details here https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-crs-rulegroups-rules?tabs=drs21%2Cowasp32#crs930-32 https://github.com/coreruleset/coreruleset/blob/main/rules/restricted-files.data#L354
