diff --git a/gradle/changelog/block_semicolon.yaml b/gradle/changelog/block_semicolon.yaml
new file mode 100644
index 0000000000..b19fc4011b
--- /dev/null
+++ b/gradle/changelog/block_semicolon.yaml
@@ -0,0 +1,2 @@
+- type: fixed
+  description: Accept file names with semicolons
diff --git a/scm-webapp/src/main/java/sonia/scm/lifecycle/modules/ScmSecurityModule.java b/scm-webapp/src/main/java/sonia/scm/lifecycle/modules/ScmSecurityModule.java
index 93629fca6f..9b994d5bf3 100644
--- a/scm-webapp/src/main/java/sonia/scm/lifecycle/modules/ScmSecurityModule.java
+++ b/scm-webapp/src/main/java/sonia/scm/lifecycle/modules/ScmSecurityModule.java
@@ -122,6 +122,7 @@ public class ScmSecurityModule extends ShiroWebModule
     // because this would exclude languages which are non ascii based
     bindConstant().annotatedWith(Names.named("shiro.blockNonAscii")).to(false);
     bindConstant().annotatedWith(Names.named("shiro.blockTraversal")).to(false);
+    bindConstant().annotatedWith(Names.named("shiro.blockSemicolon")).to(false);
 
     // disable access to mustache resources
     addFilterChain("/**.mustache", filterConfig(ROLES, "nobody"));