I'd preffer white list for `paths` _Originally posted by @Tigrov in https://github.com/yiisoft/app/pull/391#pullrequestreview-3149156156_