Lock down what use the callback filter
Merge pull request #42 from ORCID/dev-jsonFilter

Lock down what can use the callback filter