white list GET + HTTP(S) requests