> does it make sense to repeat that code sample here? 

I think it does for people skimming through instead of reading the docs, and landing at the *Invalidate tags* header.

> so is the method a blacklist or a whitelist? (you never know what people could come up with ;-)

I use Symfony's `Request::getMethodSafe()` method and an `else`. So we should be good there. 

Only thing that could be considered missing in our current implementation is that a `GET`/`HEAD` request will always have the tags set on the response, and never invalidate them. Because I'm a stickler, I think people should not abuse safe requests in this way to invalidate data, and should change their request to `POST`. Besides, they can always invalidate tags manually in their controller, if they really want to do so.