http_method_tampering.rb in contrast-agent-6.0.0

- old
+ new

@@ -10,9 +10,17 @@
         # The Ruby implementation of the Protect HTTP Method Tampering rule.
         class HttpMethodTampering < Contrast::Agent::Protect::Rule::BaseService
           NAME = 'method-tampering'
           STANDARD_METHODS = %w[GET HEAD POST PUT DELETE CONNECT OPTIONS TRACE PATCH].cs__freeze
 
+          APPLICABLE_METHODS_INPUTS = %w[
+            ACL BASELINE-CONTROL CHECKIN CHECKOUT CONNECT COPY
+            DELETE GET HEAD LABEL LOCK MERGE MKACTIVITY MKCALENDAR
+            MKCOL MKWORKSPACE MOVE OPTIONS ORDERPATCH PATCH POST
+            PROPFIND PROPPATCH PUT REPORT SEARCH TRACE UNCHECKOUT
+            UNLOCK UPDATE VERSION-CONTROL
+          ].cs__freeze
+
           def rule_name
             NAME
           end
 
           def postfilter context