spring-security/etc/nohttp
..
whitelist.lines