The default rules that ship with Adobe Experience Manager (AEM) Dispatcher should always be modified before moving the configurations to production. Here are some tips on common security vulnerabilities.