only allow /_/{name}/csv URL