lightblue-platform/lightblue — pull request #26 by dfj (2014-06-19 05:43:30+00:00)
Title: SECURITY: removed all http-method elements

The HEAD method was not specified, which would lead to an authentication bypass similar to CVE-2010-0738. With no http-method elements, all methods are secured automatically.