From 6f27015fa0dc015c06772eb63587b7472315d23c Mon Sep 17 00:00:00 2001
From: Paul Hutchinson <paulhappyhutchinson@protonmail.ch>
Date: Mon, 17 Nov 2025 15:40:30 +0000
Subject: [PATCH] [feature] SC-166737/improve app proxy security by restricting
 where token replacements can go

---
 manifest.json | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/manifest.json b/manifest.json
index 98696d7..da9f616 100644
--- a/manifest.json
+++ b/manifest.json
@@ -32,7 +32,15 @@
       {
         "url": "https://app.nutshell.com/api/v1/json",
         "methods": ["POST"],
-        "timeout": 20
+        "timeout": 20,
+        "settingsInjection": {
+          "email": {
+            "header": ["Authorization"]
+          },
+          "api_key": {
+            "header": ["Authorization"]
+          }
+        }
       }
     ]
   }