The company will block the configuration files, which interact with Web applications — since threat actors increasingly use the capability to install malicious code.