Comment by olabyne

But how is it affecting your business if only the paths 'download/.....zip' are flagged?

Does your api use theses paths as well ?