diff --git a/utils.py b/utils.py
index f717c4d18..474f2374d 100644
--- a/utils.py
+++ b/utils.py
@@ -4102,6 +4102,10 @@ def check_bad_path(path: str, allow_local_network_access: bool):
         if contains_ipv4_address(path_lower):
             return True
 
+    bad_starts = ('/firebase', '/composer')
+    if string_starts_with(path_lower, bad_starts):
+        return True
+
     return False