I have created an endpoint policy and complimentary response rule to block uploads containing sensitive data the web. During testing the blocked window shows up on my screen and in the console the incident shows blocked, however, The data is still being delivered to the website. Any suggestions?