Fix for authenticated remote code execution through layout update

Impact A layout block was able to bypass the block blacklist to execute remote code...