Added a POST location whitelist, #37