Whitelisting On Known Headers Not Recommended
We found a discussion on Twitter about this topic and we thought it would be useful to provide to provide the correct technical background related to whitelisting. Whitelisting purely on known headers certainly would be a non-optimum action, which is…