Static assets must served by the /_assets route or allowed by the site configuration