Some json resources where available via http requests outside CM-Neo. This resources may show information that should not be visible for the public.
We now implemented a "resource access filter" that ensures that those information are only accessible in content manager sessions.