spring-security/etc/nohttp/allowlist.lines

^http://[^/]*nabble.com.*
^http://blog.opensecurityresearch.com/.*
^http://iharder.sourceforge.net/current/java/base64/
^http://jaspan.com.*
^http://lists.webappsec.org/.*
^http://webblaze.cs.berkeley.edu/.*
^http://www.w3.org/2000/09/xmldsig.*
^http://www.w3.org/2001/10/xml-exc-c14n
^http://www.w3.org/2001/04/xmldsig-more
^http://www.w3.org/2001/04/xmlenc