in src/main/java/org/apache/sling/security/impl/ReferrerFilter.java [315:325]
private boolean isModification(final HttpServletRequest req) {
final String method = req.getMethod();
if (filterMethods != null) {
for (final String m : filterMethods) {
if (m.equals(method)) {
return true;
}
}
}
return false;
}