http-violations enabled