Does anyone have a list of common exclusions for an Umbraco project. Our waf blocks most things out the box but want to make sure we have excluded everything that Umbraco needs to operate correctly