Running this on a Windows server requires absurd measures to make filter patterns work:
<filter action="drop" type="regexp" pattern="/[sS][oO][mM][eE][dD][iI][rR]/" />
There should be case-insensitive comparisons to work around Microsoft's decades old filename case-insensitivity bug.