Description
To prevent conflicts with entity and schema names, static handling should be moved to the root level:
/odata/...
/static/...
rather than
/odata/static
It's also a good idea to fully restrict the resources that can be read as all xml files in the unified classpath are currently accessible.