{
	"exceptions": [
		// Affects our _ prefixed dev routes, but they've been verified to
		// always use the mitigation, ie. quoting attributes.
		"https://nodesecurity.io/advisories/61",
		// Affects request.js' dependency, but not used on user defined input.
		"https://nodesecurity.io/advisories/76",
		// Affects request.js > hawk, which should be (and is) an optional
		// dependency.  We don't use it.
		"https://nodesecurity.io/advisories/77"
	]
}
