Moved allowInjection to mountebank.js only, passed directly to the
protocol from there.